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PREFACE 


This field manual is intended as a training text in basic eh and as a reference for 
cryptanalysts in military occupational specialty (MOS) 98C and related MOSs. 


The proponent of this publication is Headquarters, United States Army Training and Doctrine Com- 
mand (TRADOC). Send comments and recommendations on DA Form 2028 (Recommended Changes 
to Publications a Blank Forms) directly to Commander, United States Army Intelligence School, 
Fort Devens (USAISD), ATTN: ATSI-ETD-PD, Fort Devens, MA 01433-6301. 


INTRODUCTION 


This manual presents the basic principles and techniques of cryptanalysts and their relation to cryp- 
tography. Cryptography concerns the various ways of rotecting messages from being understood by 
anyone except those for whom the messages are intended. Cryptographers are the people who create 
and use codes and ciphers. Cryptanalytics is the art and science of solving unknown codes and ciphers. 
Cryptanalysts try to break the codes and ciphers created and used by cryptographers. 


This publication is organized into six parts [Part One explains basic principles which apply to all the 
parts that follow. The following five parts each cover a major de of system and the cryptanalytic 
i 


joctun ey that apPty to it| Parts Two and|Fourleach build on the techniques explained in the 
parts that precede them. A new student should study these in order and Sixlare largely 
independent of|Parts Two through{Four| and can be used separately after] Part One| 

For practice in the techniques explained in this manual, the Army Correspondence Course Program 


offers a course in basic cryptanalysts. See the References Section at the back of this manual for further 
information. 
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CHAPTER 1 


PART ONE 


Introduction to Cryptanalyst 


TERMINOLOGY AND SYSTEM TYPES 


Section I 
Basic Concepts 


1-1. Cryptology 


Cryptology is the branch of knowledge which concerns secret communications in all its 
aspects. [wo major areas of cryptology are cryptography and cryptanalytics. 


1-2. Cryptography 


Cryptography is the branch of cryptology concerned with protecting communications 
from being read by the wrong people. Codes and ciphers that are used to protect com- 
munications are called cryptographic systems. The application of codes and ciphers to 
messages to make them unreadable is called encryption. The resulting messages are 
called cryptograms. The people who create and use cryptographic systems are called 
cryptographers. 


1-3. Cryptanalytics 


Cryptanalytics is the branch of cryptology concerned with solving the cryptographic 
systems used by others. The objects of cryptanalysts are to read the text of encrypted 
messages and to recover the cryptographic systems used. The text is recovered for its 
potential intelligence value. The systems are recovered for application to future 
messages in the same or similar systems. 


1-4. Signal Communications 


In military ae most encrypted messages are sent by electronic means rather 
than physically carried or mailed. The electronic means include those sent by wire and 
those transmitted by radio. Whether wire or radio is used, they can be sent by 
telephone, telegraph (Morse code), teletypewriter, facsimile, or computer. The elec- 
tronic means provide greater speed than physical means, but make the communica- 
tions more vulnerable to intercept by others. 
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Section II 


Cryptographic Systems 


1-5. Ciphers and Codes 


There are two major categories of cryptographic systems, called ciphers and codes. 
Nearly all military systems fall into one or the other of these categories or a combina- 
tion of the two. Cipher systems are those in which the pep ilies is carried out on 
single characters or groups of characters without regard to their meaning. Codes, on 
the other hand, are more concerned with meanings than characters. The basic unit of 
encryption in a code system is a word or phrase. When a message is encrypted by a 
code system, code groups primarily replace words and phrases. Code groups may also 
replace single characters where necessary, but the substitution for complete words is 
the key distinction that separates a code from a cipher. Because of this, the 
cryptanalytic approaches to codes and ciphers are quite different from each other. 


a. Messages encrypted by a cipher system are said to be enciphered. Similarly, 
messages encrypted by a code system are encoded. The resulting text is called 
ciphertext or code text. When a cryptogram is translated back into readable form or 
plaintext, it is said to be decrypted, or more specifically, decoded or deciphered. 


b. The term code in this manual is given the formal meaning as explained above and 
in more detail 4 ETS You will often see and hear the term code used with other 
meanings that do not apply here. Code, in its more general sense, can mean any 
cryptographic system or any system of replacing one set of values with another. The 
terms Morse code, binary code, Baudot code, and computer code are examples of 
the more general usage of the term. 


1-6. Enciphered Codes 


Some code systems are further encrypted by a cipher system to produce a hybrid type 
called es codes. This pee encryption process is called superencryption or 
superencipherment. Such systems are normally much more secure than singly encryp- 
ted systems, but because of the added complexity take longer to encrypt and are more 
prone to errors. 


1-7. Other Means of Security Communications 


Although most military requirements to secure communications are met through the 
use of codes and ciphers, there are other approaches that can be used in special situa- 
tions. One such approach is the use of concealment systems. In a concealment system, 
the plaintext is hidden within another longer text by a predetermined rule or pattern. 
Other approaches to concealing messages are to use invisible inks or to reduce a 
message photographically to a dot-sized piece of film. Another ee is to transmit 
a message from a tape played so fast that it sounds to the ear like a burst of static on 
the radio. Security for all these methods depends on concealing the fact that a secret 
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message is being sent at all. Once the existence of the communications is suspected or 
anticipated, the security is significantly lessened. 


1-8. Types of Ciphers 


There are hundreds of types of cipher systems ranging from very simple paper-and- 
pencil systems to very complex cipher machine or computer enciphered systems. 
These can be categorized as either transposition or substitution or a combination of the 
two. 


a. Transposition. In a transposition system, the plaintext characters of a message are 
aise | rearranged. After transposing a message, the same characters are 
still present, but the order of the letters is changed. 


b. Substitution. In a substitution system, the plaintext characters of a message are 
systematically replaced by other characters. After the substitution takes place, the 
order of the underlying plaintext is unchanged, but the same characters are no 
longer present. In the simplest substitution systems, the replacement is consistent; 
a given plaintext character always receives the same replacement character or 
characters. More secure systems change the replacements so that the equivalents 
change each time the same character is encrypted. 


1-9. Substitution Cipher Alphabets 


In everyday usage, an alphabet is a list of the letters used by a enpuaee They vary by 
language. Many European and Latin American languages share the same alphabet as 
ours or have minor variations. Russian, Greek, Arabic, and Oriental languages have 
recognizably different alphabets. The term cipher alphabets has a slighty cimereak 
meaning. Instead of a list of characters, a cipher alphabet has two parts; a list of plain- 
text characters and their cipher equivalents. In the simplest ciphers, an Bie cipher 
alphabet will have 26 plaintext letters and 26 ciphertext equivalents, as in the example 
below. 


:-abcdefghijklmnopgqrstuvwxyz 
ec: ZCFILORUXADGJMPSVYBEHKNOQTW 


p: send help 
c: BLMI ULGS 


In the example, p: designates plaintext and c: designates ciphertext. For clarity, the 
plaintext is shown in lower case and the ciphertext in capitals. A more secure alphabet 
may have more ciphertext equivalents than plaintext characters to provide for some 
variation in encipherment. Whether or not there is variation, a single alphabet system 
is called a monoalphabetic system. A system which gains more security by 
systematically using more than one alphabet is called a polyalphabetic system. 


CHAPTER 2 


SECURITY OF CRYPTOGRAPHIC SYSTEMS 


Section I 
Requirements of Military Systems 


2-1. Practical Requirements 
Military cryptographic systems must meet a number of practical considerations. 


a. An ideal cryptographic system for military purposes is a single all-purpose system 
which is practic for ue eom the highest headquarters to the individual soldier on 
the battlefield. It is secure no matter how much message traffic is sent using the 
system. It is easy to use without special training. It presents no logistics problems in 
keeping the users supplied with the system's keys. It operates under all weather 
conditions, on all means of communication, and in the dark. Little of value is com- 
promised if the enemy captures the system. No system exists that meets all these 
requirements. 


b. Cryptographic system selection for military use depends on much more than its 
degree of security. While protecting information from ter eyes, a system 
must still allow communications to take place rapidly, to be reliable, and to be 
usable by all who need to conduct communications. It must be usable under all con- 
ditions that the communications must take place. For example, a system requiring 
an hour of pains-taking encryption would go unused by a combat military force on 
the move. A system that has no tolerance for errors in its use would be inap- 
propriate for soldiers under fire in severe weather conditions. A system that only 
supports a low volume of messages would be inappropriate for a major message cen- 
ter handling thousands of messages daily. A as that requires expensive, 
sophisticated equipment would be inappropriate for a military force that can barely 
afford to buy ammunition. No single system meets all the requirements of security, 
speed, reliability, flexibility, and cost. The need for security must be balanced 
against the practical requirements when systems are selected for use. Breakable 
systems are found today, despite technological advances, because of these practical 
requirements. 
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2-2. Security Requirements of Military Systems 


When security must be balanced against practical considerations, how much security 
is enough security? 


a. Almost any cryptographic system, given enough time and resources can eventually 
be solved. The only exception to this is a system which uses absolutely random 
changing keys with every character encrypted and never repeated. Such a system 
can be achieved under very limited conditions, but is in practice impossible on any 
large scale. 


b. Even the most sophisticated machine or computer based cryptographic system can- 
not produce random, nonrepeating keys. The requirement for each communicating 
machine to generate the same keys prevents truly random keys. At best, a machine 
system can produce keys by so sophisticated a process that it appears to be random 
and resists efforts to recover the key generation process. 


c. Given the practical considerations, a military system is expected to delay successful 
a ee not prevent it. When the system is finally solved, the information obtained 
has lost most of its value. 


2-3. Factors Affecting Cryptographic Security 


As discussed above, given enough time and resources, almost any system can be 
solved. No nation has unlimited resources to devote to the effort. If the potential in- 
telligence payoff is timely enough and valuable enough and the resource costs 
reasonable, the necessary resources will usually be devoted to the effort. A number of 
ry affect the vulnerability of cryptographic systems to successful cryptanalytic 
attack. 


a. The most obvious factor is the cryptographic soundness of the system or systems in 
use. Systems with minimal key repetition and limited orderly usage patterns 
provide the most resistance. 


b. The volume of traffic encoded or ee with a given set of wk affects system 
security. The longer the keys are used without change, the more chance an analyst 
has of finding exploitable repetition and patterns to build the attack upon. 


c. The discipline of system users can play a major role in system security. A system 
that is very sound when used correctly can often be quickly compromised when 
rules are broken. An obvious example is when a user retransmits a message in the 
clear that has also been transmitted in encrypted form. When it is recognized, the 
comparison of the plaintext message with its encrypted form makes key recovery 
much easier. Other typical examples of undisciplined usage are- 


e To mix plaintext and encrypted text in the same transmission. 
e To use the same keys longer than prescribed. 


¢ To make unauthorized changes or simplifications to the system. 
e To openly discuss the contents of an encrypted message. 
e To openly discuss the system or its keys. 


d. The amount of collateral information available about the message sender and the 
situation under which the message was sent affect the security of a system. The 
more that is known about the sender, the more likely the contents of a message can 
be determined. 


Section II 


Cryptanalytic Attack 


2-4. Role of Cryptanalysts in Communications 
Intelligence Operations 

Communications intelligence (COMINT) operations study enemy communications for 
the purpose of obtaining information of intelligence value. COMINT includes the 
collection, processing, evaluation, and reporting of intelligence information gathered 
from enemy communications. When cryptanalysts is successful on a timely basis, it 
ee the most direct indication of the enemy’s intentions. Cryptanalysis is most 
ikely to be successful when other COMINT techniques are also productive. Collection 
of communications signals, transmitter location and identification, traffic analysis, 


and translation and analysis of cleartext transmissions all play a part in the produc- 
tion of COMINT. 


2-5. Comparison Between Cryptanalysts and 
Traffic Analysis 
Cryptanalysis is the study of encrypted messages. These messages, when passed as 


part of radio communications, or traffic, are considered the internals of the com- 
munications. Traffic analysis is the study of the externals of the communications. 


a. The externals of a communications include the following: 
e Call signs and call words. 
e Call up procedures between operators. 
e Radio frequencies. 
e Times of transmissions and total volume of traffic. 
e Routing information indicating where a message is to be sent. 
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e Chatter between radio operators. 
e Serial numbers or other filing information. 
e Indications of precedence or importance of the messages. 


e Indicators designating what cryptographic systems or what key settings are in 
use. 


These externals can be a rich source of information about an enemy, regardless of 
encrypted message recovery. The systems that communicators use to provide this 
external information can give substantial clues to unit type, organization, and the 
purpose of communications. 


b. The last category of externals mentioned above, indicators of the cryptographic 
systems or keys in use, is of particular interest to both the traffic analyst and the 
eae For the traffic analyst, the indicators help establish patterns of usage 
which give clues to the enemy’s organization and structure. For the cryptanalyst, 
the indicators help group messages into those encrypted by the same system or 
keys. In some cases, they may even aid directly in the solution of the system. 


2-6. Steps in Cryptanalysis 


The solution of nearly every cryptogram involves four basic steps- 
e Determination of the language used. 

e Determination of the general system used. 

e Reconstruction of the specific keys to the system. 

e Reconstruction of the plaintext. 


a. Determination of the language used normally accompanies identification of the 
sender through traffic analysis or radio direction finding. If these forms of support 
are deaaiele or if an enemy uses several languages, the determination af the 
language may have to be mide at a later stage of analysis. 


b. Determination of the general system can come from several sources, such as— 


e A detailed study of the system characteristics, aided where necessary by charac- 
ter frequency counts, searches for repeated patterns, and various statistical 
tests. The study can extend beyond single messages to searching for patterns 
and repetitions between different messages with similar characteristics. This 
ne step of system determination can be the most time consuming part of the 
analysis. 

e Past history of system usage by the sender. In most cases, the user does not 
change systems regularly but uses the same system or set of systems from one 
day to the next. The specific keys may change panes but the general systems 
remain unchanged except at longer intervals. 


e System indicators included with the traffic. Whenever the user has a choice of 
systems or a choice of keys within the system, the choice must be made known to 
the receiving cryptographer. The choice is usually communicated by some form 
of indicators, which can appear within the text of a message or as part of the 
externals. When the indicators reveal the choice of system, they are called 
system indicators or discriminants. When they denote specific frequently 
changing keys to the system, they are called message indicators. Once you learn 
just how indicators are used from day to day, they can provide a substantial 
assist to cryptanalysts. 


c. Reconstruction of the specific keys to the system is an important step. Although the 
following step of plaintext recovery produces the most intelligence information, the 
full key reconstruction can speed recovery of future messages. The approach used to 
recover keys will vary greatly from system to system. 


d. Reconstruction of the plaintext, although listed as the final step, will usually 
proceed simultaneously with the key reconstruction. Either step can come first, 
depending on the system and situation. Partial recovery of one aids in the recovery 
of the other. The two steps often proceed alternately, with each recovery of one 
helping in recovery of the other until a full solution is reached. 


Section III 
Analytic Aids 


2-7. Analytic Aids to Identification and Solution 


There are a number of aids to identification and solution available to help you as a 
cryptanalyst. By preparing character frequency counts, performing statistical tests, 
and recording observed repetitions and patterns in messages, you can compare the 
data to established norms for various systems and languages. The appendixes to this 
manual include charts, lists, and tables of normal data for the English language. 
Similar data are available for other languages. The counting of character frequencies, 
performance of statistical tests, and search for oats and patterns can be done 
manually or with computer assistance, where available. This section outlines the aids 
that apply to many pe of systems. Procedures that apply to specific systems are 
explained in individual sections. 


2-5 


2-8. Language Characteristics 


Each language has characteristics that aid successful cryptanalysts. 


a. The individual letters of any language occur with greatly varying frequencies. Some 
letters are used a great deal. Others are used only a small percentage of the time. In 
English, the letter E is the most common letter used. It occurs about 13 percent of 
the time, or about once in every eight letters. In small samples, other letters may be 
more common, but in almost any sample of 1,000 letters of text or more, E will be 
the most frequent letter. In other languages, other letters sometimes dominate. In 
Russian, for example, O is the most common letter. The eight highest frequency let- 
ters in English, shown in descending order, are E, T, N, R, O, A, I and S. The eight 
highest frequency letters make up about 67 percent of our language. The remaining 
18 letters only make up 33 percent of English text. The lowest frequency letters are 
J, K, Q,X, and Z. These five letters makeup only a little over 1 percent of English 
text. The vowels, A, E, I, O, U and Y, make up about 40 percent of English text. In 
many cryptographic systems, these frequency relationships show through despite 
the encryption. The analysis techniques explained in the following chapters make 
repeated use of these frequency relationships. In particular, you should remember 
the high frequency letters, ETNROAIS, and the low frequency letters, JKQXZ, for 
their a application. The word SENORITA, which includes the high fre- 
quency letters is one way to remember them. Some aaa prefer to cement the 
pronounceable ETNORIAS as a close approximation of the descending frequency 
a Choose the method you prefer. The high frequency letters are referred to fre- 
quently. 


b. Just as single letters have typical frequency expectations, multiple letter combina- 
tions occur with varying, but predictable frequencies, too. The most common pair 
of letters, or digraph, is EN. After EN, RE and ER are the most common digraphs. 
There are 676 different possible digraphs in English, but the most common 18 make 
up 25 percent of the language Appendix Al lists the expected frequencies of English 
language digraphs. Some cryptographic systems do not let individual letter fre- 


uencies show through the encryption, but let digraphic frequencies come through. 
n[Part three 


e systems explained in| Part Three|of this manual show this characteristic. 


c| Appendixes Bland Cllist frequency expectations for sets of three letters (trigraphs) 


and four letters (tetragraphs). Each of these can be useful when studying cryp- 
tograms in which three and four letter repeated segments of text occur. 


d. Repeated segments of two to four letters will often occur because they are common 
letter combinations, whether or not they are complete words by themselves. Longer 
repeated segments readily occur when words and phrases are reused in plaintext. 

en words are reused in plaintext, they may or may not show up as repeated seg- 
ments in ciphertext. For a word to show through as a repeat in ciphertext, the same 
keys must be applied to the same plaintext more than once. Even complex systems 
which keep changing keys will sometimes apply the same keys to the same plain- 
text and a repeated ciphertext segment will result. Finding such repeats gives many 


clues to the type of system and to the plaintext itself. The search can extend beyond 
single messages to all messages that you believe may have been encrypted with the 
same set of keys. If computer support is available to search for repeats for you, a 
great deal of time can be saved. If not, time spent scanning text to search for 
repeats will reward you for your time when you find them. 


2-9. Unilateral Frequency Distribution 


The most basic aid to identification and solution of cipher systems is the unilateral 
frequency distribution. The term unilateral means one letter at a time. A unilateral 
frequency distribution is a count of all the letters in selected text, taken one letter at a 
time. 


a. The customary method of taking the distribution is to write the letters A through Z 
horizontally and mark each letter of the cryptogram with a dash above or below the 
appropriate letter. Proceed through the message from the first letter to the last, 
marking each letter in the distribution. Avoid the alternate method of counting all 
the As, Bs, Cs, and so forth, which is very subject to errors. For convenience, each 
group of five is crossed off by a diagonal slash. The unilateral frequency distribution 
for the first sentence in this paragraph is shown below. 


For comparison, the next example shows the frequency count for the fourth and 
fifth sentences in paragraph 2-9a. 


b. Although individual letter frequencies differ, the pattern of high and low frequency 
letters is quite similar. The letters that stand above the others in each tally are, 


with few exceptions, the expected high frequency letters—ETNROAIS. The expec- 
ted low frequency letters, JKQXZ, occur once or twice at most. Even in as small a 
sample as one or two sentences, expected patterns of usage start to establish them- 
selves. Compare this to a frequency count of all letters in this paragraph. 


THEA, PA HE ATT 
tH HH AI 


Z 
Z 
=: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
28 2 17 8 6411 5 20211 1 20 6 21 22:10 7 25 2848 11 4 6 5 5 2 


c. When a larger sample is taken, such as the above paragraph, the letters occur much 
closer to the expected frequency order of ETNROAIS. As expected, E and T are the 
two highest frequency letters. but the next series of high frequency letters in 
descending order of occurrence, ASRINO, differs slightly from the expected order of 
NROAIS. he would take a sample thousands of letters long to produce frequencies 
exactly in the expected order. Even then, differences in writing style between a field 
manual and military message texts could produce frequency differences. For exam- 
ple, the word the is often omitted from military message traffic for the sake of 
brevity. More frequent use of the raises the expected frequency of the letter H. 


2-10. Letter Frequencies in Cryptograms 


As different cipher systems are explained in this manual, the ways in which letter 
frequencies can be used to aid identification and solution will be shown. Some basic 
considerations should be understood now. 


a. In transposition systems, the letter frequencies of a cryptogram will be identical to 
that of the plaintext. A cryptogram in which the ciphertext letters occur with the 
expected frequency of plaintext will usually be enciphered by a transposition 
system. 


b. In the simplest substitution systems, each plaintext letter has one ciphertext 
equivalent. The ciphertext letter frequencies will not be identical to the plaintext 
frequencies, but the same numbers will be present in the frequency count as a 
whole. For example, if there are 33 Es in the plaintext of a message, and if E is 
enciphered by the letter K, then 33 Ks will appear in the ciphertext frequency 
count. 


c. More complex substitution cipher systems, such as the polyalphabetic systems in 
[Part Feud of this manual, will keep changing the equivalents. E might be 
enciphered by a K the first time it occurs and by different cipher letters each time it 
recurs. This will produce a very different looking frequency count. 


d. To illustrate the differences in appearance of frequency counts for different types of 
systems, examine the four frequency counts infFigure 2-1 Each one is a frequency 
count of the message listed above it. The four messages are different, but each has 
the same plaintext. The first shows the plaintext and its frequency count. The 
second shows the frequencies of the same message enciphered by a transposition 
system. The third shows a simple substitution system encipherment. The fourth 
shows a polyalphabetic substitution encipherment. 


2-11. Roughness 


The four examples i show another characteristic of frequency counts which 


is useful in system identification. The first three distributions all contain the same let- 
ter frequencies. In the first two, the plaintext and the transposition examples, there are 
16 Es. In the third, where E has been replaced by W, there are 16 Ws. Where there were 
9 As, there are now 9 Ls. Where there was 1 K, there is now 1 C. The first three dis- 
tributions show the same wide differences between the highest frequency letters and 
the lowest. The fourth distribution is very different. The distribution lacks the wide 
differences between the highest and lowest frequency letters. Where the first three 
showed distinct highs and lows, or peaks and troughs, in the distributions, the fourth is 
relatively flat. 


a. Frequency counts which show the same degree of difference between peaks and 
troughs as plaintext are considered to be rough distributions. Systems which sup- 
press the peaks and troughs of plaintext letters by changing their equivalents 


produce flatter distributions. If letters were selected randomly from the 26 letters of 
the English alphabet, the resulting distribution would look very much like the 
fourth example. Random selection will not produce a perfectly level distribution, 
but it will appear quite flat in comparison to plaintext. 


Plaintext: 


AERIAL RECONNAISSANCE REPORTS ENEMY REINFORCEMENTS ESTIMATED 
AT BATTALION STRENGTH ENTERING YOUR SECTOR PD CLARKE 


Transposition: 


ANRME MTNNO ENEYM AAGGR RAPRE TLTYP IIOEN EIHOD ASRIT DOEUC 
LSTNS ANNRL RASFE TSTSA ENEOS BTEER CCNRT ARRCK OEECI TEITE 


Simple substitution: 


LWVOL QVWAT DDLOH HLDAW VWPTV FHWDW RSVWO DNTVA WRYDF HWHFO 
RLFWK LFJLF FLQOT DHFVW DMFBW DFWVO DMSTX VHWAF TVPKA: QLVCW 


Polyalphabetic substitution: 


TARAB CZPNW TNNLL ZEFNM KLNHF OWWQM PEPVYM NKRXK QNPRB FXZXE 
MBXEO LFIJML RWPZS GZXSS EUZYS IXWRV QZFSG FEITT HYHRW EGIKF 


ABCDEFGHIIJKLMNOPQRSTUVWXYZ 


Figure 2-1. Frequency count comparison. 
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b. The simplest substitution systems tend to produce rough distributions. The most 
secure tend to produce flat distributions. Many other systems tend to fall in 
between. You can use the degree of roughness as one of the aids to system iden- 
tification. 


2-12. Coincidence Tests 


Judging whether a given frequency distribution has the same degree of roughness as 
plaintext or random text is not easy to do by eye alone. To help you make this deter- 
mination, a number of statistical tests have been developed for your use. The tests are 
based in probability theory, but you can use the tests whether or not you understand 
the underlying theories. The most common tests are called coincidence tests. 


a. If you pick any two letters from a message, compare them together, and they hap- 

en to be the same letter, they are said to coincide. A comparison of the same 

etters, for example, two As is a coincidence. This comparison can be made of 
single letters or pairs of letters or longer strings of letters. 


b. If you compare two single letters selected at random from the English alphabet, the 
probability of their being the same is 1 in 26. One divided by 26 is .0385. Expressed 
as a percentage, 1/26 is slightly less than 4 percent. You would expect to find a coin- 
cidence 3.85 times on the average in every 100 comparisons. 


aQ 


. If you select two letters from English plaintext, however, the probability of their 
being the same is higher than 1 in 26. Frequency studies have shown that the 
probability of a coincidence in English plaintext is .0667. In other words, in a) 
100 comparisons, you would expect to find 6.67 coincidences in plaintext. Eac 
language has its own probabilities, but similar traits occur in each alphabetic 
language. 


d. Different coincidence tests use different methods of comparing letters with each 
other, but each rests on the probabilities of random and plaintext comparisons. The 
actual number of coincidences in a cryptogram can be compared with the random 
and plaintext probabilities to help make judgments about the cryptogram. 


2-13. Index of Coincidence 


A common way of expressing the results of a coincidence test is the index of 
coincidence (XC). The index of coincidence is the ratio of observed coincidences to the 
number expected in a random distribution. For plaintext, the expected index of 
coincidence for single letters in English is the ratio of .0667 to .0385, which is 1.73. 
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2-14. Monographic Phi Test 


The most common coincidence test is the monographic phi test, which provides a 
mathematical way of ae roughness of a frequency count. Monographic is a 
fancy synonym for one letter. The term monographic distinguishes the test from the 
digraphic phi test, performed on two letter pairs, and other forms of the phi test. Phi is 
the English spelling of the Greek letter 6. The monographic phi test is based on the 
coincidence probabilities that occur when every letter in a cryptogram is compared 
with every other letter in the cryptogram. 


a. Fortunately, the phi test can be calculated without actually comparing every letter 
with every other letter. Both the total number of comparisons and the total number 
of coincidences can be calculated from the frequency count. 


b. The total number of comparisons when every letter is compared with every other 
letter is the total number of letters multiplied by the total number minus one. 
Expressed as a formula, it looks like this— 


Comparisons = N (N - 1). 


c. Since one out of every 26 comparisons in a random distribution is expected to be a 
coincidence, the formula for the expected random value of phi is as follows: 


or = N (N — 1) 
26 


or 


or = .0385 N (N — 1). 


d. The expected value for plaintext coincidences is- 


op = .0667 N (N — 1). 


e. Just as the total number of comparisons is N (N - 1), the total number of coin- 
cidences for each letter is f (f - 1), where f is the frequency of the individual letter. 
The total number of coincidences is the sum of the coincidences for all the letters. 
The total number of coincidences is labeled phi observed or go, and can be 
expressed as either- 


60 = A + oB + oC +... + OZ 
or 


oo = xf (f — 1). 


(The Greek letter sigma (X)is used to mean sum of.) 


f. To calculate 0, take each letter frequency greater than 1 and multiply it times the 
frequency minus 1, as the formula Paaeal (You can ignore letters with a frequency 
of 1, because they will be multiplied by 0.) Then add the results of all the 
multiplications. 


g. The index of coincidence for the phi test is called the delta IC. The delta IC is the 
ratio of phi observed to phi random. It can be expressed using the Greek letter delta 


(A). 


AIC = 26 Sf (f — 1) 
N(N — 1) 


h. The results of a phi test can be expressed in terms of 0, dp, and or as the AIC. 
Where computer support is available to perform the calculations, the AIC is the 
form usually shown. Where paper and pencil methods are used, either form may be 
used. Both methods are shown in the next example. 


Letters: BCDEFGHIIJKLMNOPQRS TUVWXYZ 


A 
f:330721140010004:!630410510 3 

2 

6 


f-1: 2 6 } 3 3 5 2 3 4 2 
f£(f-1): 6 42 2 12 12 30 6 12 20 6 
oo = if (f—1) 
= 64+6+424+24+12412+30+ 6412+ 20+ 6 
= 154 
op = .0667 N(N — 1) 
= .0667 x 50x 49 
= 163 
or = .0385 N(N — 1) 
= .0385 x 50 x 49 
= 94 
AIC = 0/or 
= 154/94 
= 1.64 


2-15. Interpreting the Phi Test 


The previous example showed results close to the expected value for plaintext. This 
indicates the frequency count it was based on had the same approximate degree of 
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roughness as expected for plaintext. It does not show that it was plaintext or that it 
was enciphered in a simple substitution system, although the latter is possible. It must 
be considered as just one piece of evidence in deciding what system was used. 


a. In plaintext of 50 to 200 letters, the delta IC will usually fall between 1.50 and 2.00. 
Shorter text can vary more, and longer text will be consistently closer to 1.73. Since 
simple monoalphabetic systems have the same frequency distribution as plaintext, 
these simple systems follow the same guidelines as plaintext. 


b. Random text centers around a IC of 1.00 but is subject to the same variability as 
mat Small samples of under 50 letters vary widely. Samples in the 50 to 200 
etter range will usually fall between 0.75 and 1.25. Larger samples approach 1.00 
more consistently. 


rs pe estas systems tend to resemble random text, and the more different 
alphabets that are used, the more likely the AIC is to approach 1.00. 


d. The four frequency counts in|Figure 2-] follow these guidelines closely. Each one is 
100 letters long. The first three, the plaintext, the transposed text, and the simple 


monoalphabetic substitution each have a AIC of 2.00. The fourth example, the 
polyalphabenc substitution example, has a AIC of 1.05. The system used in the 
example has 26 different alphabets, and the underlying plaintext frequencies have 
been thoroughly suppressed. 


PART TWO 


Monographic Substitution Systems 


CHAPTER 3 


MONOALPHABETIC UNILATERAL SUBSTITUTION 


SYSTEMS USING STANDARD 
CIPHER ALPHABETS 


Section I 
Basis of Substitution Systems 


3-1. Substitution Systems 


The study of analysis of substitution systems begins with the simplest of systems. The 
systems Pada in Part Two are monographic substitution systems. The systems in 
4 


Chapters 3 and 


are further categorized as monoalphabetic unilateral substitution 


systems. 


a. 


C. 


Both monographic and unilateral mean one letter by their construction. The 
prefixes mono- and uni- mean one, and graphic and literal refer to letters or other 
characters. Monographic systems are those in which one plaintext letter at a time is 
encrypted. Unilateral systems are those in which the ciphertext value is always one 
character long. Note that the term monographic refers to single plaintext letters 
and the term unilateral refers to single ciphertext letters. 


. Monoalphabetic systems are those in which a given ciphertext value always equals 


the same plaintext value. One alphabet is used. ” 


deals with monoalphabetic multilateral systems, which substitute more 
an one ciphertext character for each plaintext character. Later parts of this 
manual present the analysis of polygraphic and polyalphabetic systems. 
Polygraphic systems substitute values for more than one plaintext letter at a time. 
In polyalphabetic systems, a given ciphertext character will have different plaintext 
equivalents at different times through the use of multiple alphabets. 


. The techniques used with these simplest of systems carry over to the more com- 


plicated systems. Whether or not you will ever see the very simple systems in use, 
the same skills are used in combination with other techniques to solve more secure 
systems as well. 
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3-2. Nature of Alphabets 


A cipher alphabet lists all the plaintext values to be yin paired with their 
ciphertext equivalents. Cipher alphabets can take many different forms from a simple 
listing of 26 letters with 26 equivalent letters to much more complex charts. Chapters 3 
and] 4}deal with the simple 26 letter for 26 letter types and Chapter Sjintroduces some of 
the more complex chart type multilateral systems. 


a. The simple 26 letter for 26 letter cipher alphabets are composed of two sequences of 
letters: the plain component sequence and the cipher component sequence. The 
letter sequences can be in standard A through Z order, systematically mixed order, 
or randomly sequenced. Alphabets are classed as standard, mixed, or random 
according to the types of sequences they contain. The techniques used to solve the 
system depend to some extent on the type of alphabet. Alphabets in which both 
components are standard A through Z sequences are called standard alphabets. 


b. A standard sequence does not have to be written beginning with A and ending with 
Z. A sequence is considered to have no beginning or ending, but continues as if it 
were written in a circle. The letter that follows Z in a standard sequence is A. Each 
of the following examples is a standard sequence. 


ABCDEFGHIJKLMNOPQRS TUVWXYZ 
JKLMNOPQRSTUVWXYZABCDEFGH I 


c. If the alphabetic progression is in the normal left to right order, it is called a direct 
standard sequence. If the alphabetic progression proceeds from right to left, it is 
called a reverse standard sequence. Each of the following examples is a reverse stan- 
dard sequence. 


ZYXWVUTSRQPONMLKIJIJIHGFEDCBA 
DCBAZYXWVUTSRQPONMLKJIJIHGFE 


d. Standard alphabets are also classed as direct or reverse. If the two standard 
sequences (plaintext and ciphertext) run in the same direction, the alphabet is 
called a direct standard alphabet. Each of the following alphabets is a direct stan- 
dard alphabet. Notice that the second one has the identical equivalents to the first 
and can be rewritten in left to right order without changing its substitution at all. 


p>: abcdefghijkIimnopqrstuvwxyz 
c: RS TUVWXYZABCDEFGHIIJIKLMNOPQ0 


pi zyxwvutsrqgponmikjihgfedcba 
c: QPONMLKIJIIHGFEDCBAZYXWVUTSR 


>: jihgfedecebazyxwvutsrqponm! k 
c: ZYXWVUTSRQPONMLKIJIHGFEDCBA 


e. If the two standard sequences (plaintext and ciphertext) run in opposite directions, 
the alphabet is called a reverse standard alphabet. Notice that the two following 
examples of reverse standard alphabets are also equivalent. 


P>abcdefghijkimnopgqgrstuvwxyz 
c: GFEDCBAZYXWVUTSRQPONMLKJIIH 


p> gfedcecebazyxwvutsrgqgponmlikjih 
cs ABCDEFGHIJKLMNOPQRS TUVWXYZ 


f. An alphabet, in which the plain component is shown in A through Z order, is called 
an enciphering alphabet. The first alphabet after paragraph 3-2e is an enciphering 
alphabet. If the cipher component is in A through Z order, it is called a deciphering 
alphabet. The second alphabet is a deciphering alphabet. 


g. Standard alphabet cryptograms are the easiest to solve. The rest of Chapter 3 
explains the techniques of cryptography and cryptanalysts of standard 
monoalphabetic ciphers. 


Section II 


Monoalphabetic Unilateral Substitution 


3-3. Cryptography 


The users of a monoalphabetic unilateral substitution system must know three things 
about the keys to the system. They must know what sequence of letters is used for the 
plain component, what sequence is used for the cipher component, and how the two 
components line up with each other. The alignment is termed thespecific key. 
Whatever keys are put into use a the originating cryptographer must be known by the 
receiving cryptographer, too. The key selection must either be prearranged or sent 
along with the cryptogram itself. 
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a. era ae keys are normally included in published operating instructions, known 
variously as the Signal Operation Instructions (SOI) or Communications- 
Electronics Operation Instructions (CEOI). For example, an SOI ani specify the 
use of direct standard sequences for an extended period and a new alignment of the 
two sequences at regular shorter intervals. A portion of an SOI might look like this 
example. 


31 May 1989, 0001-06002 


Pp: abcdefghijkIimnopqarstuvwxyz 
c: QPONMLKJIHGFEDCBAZYXWVUTSR 
31 May 1989, 0601-1200Z 


ppabcdefghijkimnopqrstuvwxyz 
c: TSRQPONMLKJIJIHGFEDCBAZYXWVU 


Another way to provide exactly the same information in a more abbreviated form is 
shown below. 


31 May 1989 


Plain component: Direct standard sequence. 
Cipher component: Reverse standard sequence. 


0001-0600Z: Ap Qc 
0601-1200Z: Ap = Tc 


In this example, the alphabet construction is left to the cryptographer, who writes 
out the sequences and aligns them with each other according to the specific keys for 
each key period. 


b. Transmitted keys are used whenever the cryptographer is given some choice of the 
specific key selections. For example, if the alignment of the sequences were left to 
the cryptographer, the alignment would need to be transmitted. One way to do this 
is to agree that the first group of the near is always the cipher equivalent of 
pa A repeated five times. This group then tells the receiving cryptographer 

ow to align the alphabet. The example is simple, but more complex systems can 
be used for greater security. 


3-4. Message Preparation 


The cryptographer normally prepares a message for encryption by writing the plain- 
text in regular length groups. Four or five letter groups are common for this type of 
system. 


a. Word lengths are not preserved normally, because they provide strong clues to the 
plaintext when they appear. It is easier for a cryptanalyst to figure out the plaintext 
for example 1 in Figure 3-1 than example 2. 


p> abcdefghijktimnopgqrstuvwxyaz 


ec: JIKLMNOPQRSTUVWXYZABCDEFGH I 
Plaintext to be enciphered: ATTACK AT DAWN 


@ Example 1: Word length encipherment. 
p: attack at dawn 


c: JCCILT JC MIFW 


Resulting cryptogram: JCCILT JC MIFW 


@ Example 2: Four letter group encipherment. 


p: atta ckat dawn 
c: JCCJ LTIC MIFW 


Resulting cryptogram: JCCJ LTIC MIFW 


Figure 3-1. Word and group length encipherment. 


b. In writing out the message for encipherment with a simple system, any numbers in 
the text must be spelled out or left in the clear. Punctuation must be spelled out or 
omitted. At the end of sentences, PD or STOP is often used in English. Commas are 
replaced by COMMA or CMA. 


c. Whenever the text does not break evenly into groups, the text will generally be pad- 
ded to fill out the groups. The filler letters are usually added at the end of the last 
roup. For clarity, they are often just a repeated low frequency letter such as X or Z. 

e above cryptogram, broken into five letter groups, appears below. 


JCCIL TICMI FWXXX 
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Section III 


Solution of Monoalphabetic Unilateral 
Ciphers Using Standard Cipher Alphabets 


3-5. Methods of Solution 


Because of the extreme simplicity of standard alphabets, cryptograms enciphered with 
them can always be solved. There are two general approaches to solving these simple 
ciphers. One makes use of the frequency characteristics discussed Chapter The 
other uses the orderly progression of the alphabet to generate all possible decipher- 


ments from which ha can pick the correct plaintext. Each method is explained in the 
following paragraphs. 


3-6. Frequency Matching 


The first approach consists of matching expected plaintext letter frequencies with the 
observed ciphertext letter frequencies. 


a. As cal in| Chapter 2] monoalphabetic unilateral ciphers preserve exactly the 


same letter frequencies as found in plaintext. The frequencies occur with the cipher 
equivalents, not the plaintext letters, but the numbers are unchanged. If E was the 
most common plaintext letter in a cryptogram, then E’s replacement will be the 
highest frequency ciphertext letter. 


b. With standard alphabets, another characteristic is preserved in addition to the 
individual letter frequencies. The order of highs and lows is also preserved. With a 
direct standard alphabet, the pattern of peaks and troughs remains, although 
shifted to the right or left. With a reverse standard alphabet, the pattern also 
remains, but it runs in the opposite dectondfgue 3 illustrates the expected 
frequency distribution of 100 letters of plaintext. It then shows what happens to the 
distribution when it is enciphered by a direct and a reverse standard alphabet. 


c. As shown in Figure 3-2] there are several recognizable patterns in plaintext. First is 


the three peak pattern formed by the letters A through I. The pattern is a peak (A), 
a three letter trough (BCD), a peak (E), a three letter trough (FGH), and a peak (I). 
The second easy to recognize pattern is formed by the letters N through T. The 
pattern is a double peak (NO), a trough (PQ), and a triple peak (RST). When you 
compare the plaintext distribution with the two ciphertext distributions, the pat- 
terns are still evident. 


Plaintext: 


ee =F} Hie - 


ABCDEFGHIJKLMNOPQRSTUVWXY2Z 


Ciphertext using a direct standard alphabet: 


pe 


a ee: =e Hii- _ 


ABCDEFGHIIJKLMNOPQRSTUVWXYZ 


Ciphertext using a reverse standard alphabet: 


= .- 7? 
= ea ee 


ABCDEFGHIIJKLMNOPQRSTUVWXYZ 


Figure 3-2. Frequency distributions. 


d. Not all plaintext frequency distributions show the patterns clearly. The examples 
in Figure 3-2 show a perfect 100 character frequency distribution with every letter 
appearing exactly as many times as expected. Actual frequency counts will var 
considerably, particularly with small samples. It is easier to recognize the overall 
patterns by their frequency than it is to recognize individual letters, however. If you 
can recognize even a partial pattern, it is easy to write the whole alphabet and see if 
the frequencies are close to expectations. Consider the cryptogram shown below. 


CDRDC IPRIS JGXCV EPHI] LDUDJ GWDJG HXXXX 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


= a = ee = fe ee 
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The four Xs at the end are almost certainly fillers, so they are not counted. The 
cryptogram is too short for the complete pattern to appear. The cluster of higher 
frequency letters from C through I could represent the N through T pattern, 
though. We will write the full sequence of letters on that assumption. 


p>: Imnopqrstuvwxyzabcdefghi j k 


c: ABCDEFGHIIJKLMNOPQRS TUVWXYZ 


The frequency match fits the plaintext letters reasonably well. E does not hie at 
all, but other vowels make up for it, keeping the vowels near the expected 40 per- 
cent. No low frequency letters appear with unexpectedly high frequency. The con- 
firmation of the match occurs when the alphabet is tried with the cryptogram. 


nocon tactd uring pastt wofou rhour s 
CDRDC IPRIS JGXCV EPHII LDUDJ GWDJG HXXXX 


or 
NO CONTACT DURING PAST TWO FOUR HOURS 


e. This method depends on knowing or suspecting that standard alphabets are used. 
With a long message, the frequency count will usually make it obvious. The A-E-I 
and the NO-RST peaks will stand out. With a short message like the above exam- 
ple, : is not obvious, but it is an easy step to try if you think you spot a partial 
match. 


3-7. Generating All Possible Solutions 


The frequency matching technique only works if the text is long enough to produce a 
recognizable frequency count. A second technique always leads to the solution. With a 
known standard alphabet, there are only 26 different ways the alphabet can be 
aligned. It does not take very long to try all 26 settings to find the correct solution. 


a. As an example, consider the solution of the following cryptogram. 


SIZUX VIFLK 
With no repeated letters, frequency matching is not likely to help. Suppose the 
alphabet was a direct standard with p:a=c: Z. 


p> abcdefghijktimnopgqgrstuvwxyz 
c: ZABCDEFGHIIJIKLMNOPQRSTUVWXY 


Using the above alphabet, SIZUX VJFLK deciphers as TTAVY WKGML. Obviously, 
this is not the correct plaintext. The text the trial decipherment produces is called 
pseudoplaintext or pseudotext. Suppose the alphabet used p:a=c:Y. 


P: abcdefghijkimnopgqrstuvwxyz 
cs YZABCDEFGHIIJIKLMNOPQRSTUVWX 


This alphabet produces UKBWZ 
The next alphabet with p:a=c:X gives the text VLCXA 
The next alphabet with p:a=c:W gives the text WMDYB 
The next alphabet with p:a=c:v gives the text XNEZC 


XLHNM. 
YMION. 
ZNJPO. 
AOKCP. 


Clearly, not one of these is the correct setting, but notice the effect of trying each 
alphabet in turn. The columns of letters from each successive trial ae are in 
alphabetical order. You can achieve the same effect as trying each alphabet in turn 
by listing the letters vertically in alphabetical order. Figure 3-3 lists the results of 


trying all possible alphabets. 


S1ZUX VIFLK 


TJAVY WKGML 
UKBWZ XLHNM 
VLCXA YMION 
WMDYB ZNJPO 
XNEZC AOKQP 
YOFAD BPLRQ 
ZPGBE CQMSR 
AQHCF DRNTS 
BRIDG ESOUT 
CSJEH FTPVU 
DTKFI GUQW 
EULGJ HVRXW 
FVMHK IWSYX 
GWNIL JXTZY 
HXOJM KYUAZ 
IYPKN LZVBA 
JZQLO MAWCB 
KARMP NBXDC 
LBSNQ OCYED 
MCTOR PDZFE 
NDUPS QEAGF 
OEVOT RFBHG 
PFWRU SGCIH 
QGXSV THDII 
RHYTW UIEKJ 


Figure 3-3. All possible decipherments. 
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The plaintext, BRIDGES OUT, appears about halfway down the columns. In prac- 
tice, you would only write enough to recognize the plaintext. Generally, write a 
column at a time, and only write as many columns as you need. Once you have spot- 
ted plaintext, set up the alphabet and complete the decipherment. 


b. With a reverse standard alphabet, another step must be added. You cannot 
generate the columns until you try deciphering first at any alphabet setting of your 
choice. Then generate the columns starting with your trial decipherment. As you 
will see in the ae chapters, this technique can be used with any known 
alphabets, not just standard ones. The procedures, which will be illustrated in 


are— 


Set up the known alphabet at any alignment. 
Perform a trial decipherment to produce pseudotext. 


Using the trial decipherment as the letters at the head of the columns, generate 
all possible decipherment by listing the plain component sequence vertically 
for each column. 


CHAPTER 4 


MONOALPHABETIC UNILATERAL SUBSTITUTION 


SYSTEMS USING MIXED 
CIPHER ALPHABETS 


Section I 
Generation and Use of Mixed Cipher 
Alphabets 


4-1. Mixed Cipher Alphabets 


Mixed cipher alphabets differ from standard alphabets in that one or both sequences 
are mixed sequences. A mixed sequence is any sequence not in normal alphabetical 
order. The two main types of mixed sequences are systematically mixed and random 
mixed sequences. 


a. 


Systematically mixed sequences are produced by an orderly process based on easily 
remembered keywords, aN or simple rules. There are a number of mixed 
sequence types, which will be explained in this section. Their advantage is that the 
keys can be easily memorized and reconstructed for use when needed. Their disad- 
vantage is that the orderliness in construction can be used by the opposing 
cryptanalyst to aid in their recovery. 


. Random mixed sequences are not based on any orderly generation process. They 


can be produced by various means ranging from pulling the 26 letters out of a hat to 
complex machine generation. Their advantage is that their structure offers no help 
to the opposing cryptanalyst. Their disadvantage is that the keys cannot be 
memorized easily or produced from simple directions as systematically mixed 
sequences can. They must be printed out in full and supplied to every user. 
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4-2. Keyword Mixed Sequences 


One of the simplest types of systematic sequences is the keyword mixed sequence. The 
sequence begins with the keyword, which may be a word or a phrase. Any letters 
repeated in the keyword are used only once, dropping the repeating letters. After the 
keyword, the rest of the letters are listed in alphabetic order, omitting those already 


used. 


Keyword— CRYPTOGRAPHIC 


Repeated letters dropped: CRYPTOGAHI 


Remaining letters added in normal order: 


CRYPTOGAHIBDEFJKLMNQSUVWXZ 


Keyword— MILITARY INTELLIGENCE 


Repeated letters dropped: MILTARYNEGC 


Remaining letters added in normal order: 


MILTARYNEGCBDFHJKOPQSUVWXZ 


4-3. Transposition Mixed Sequences 


Transposition mixed sequences are produced by writing a letter sequence into a matrix 
and extracting it from the matrix by a different route. The most common types are 
called simple columnar, numerically keyed columnar, and route transposition 


Sequences. 


a. Simple columnar transposition is usually based on a keyword mixed sequence. The 
keyword determines the width of the matrix that is used. The keyword is written as 
the first row of a matrix and the rest of the sequence is written beneath it, taking as 
many rows as necessary. The transposition mixed sequence is then produced by 
extracting the columns of the matrix from left to right. 


Keyword— ARTILLERY 


Keyword mixed sequence in matrix: 


Resulting sequence: 


ABKURCMVTDNWIFOXLGPZEHQYJS 


Keyword- MORTAR 


Keyword mixed sequence in matrix: 


Resulting sequence: 


MBGLUZOCHNVRDIPWTEJQXAFKSY 


b. The numerically keyed columnar transposition mixed sequence differs from the 
simple columnar only in the way it is extracted from the matrix. Instead of 
oe the columns left to right, the order of the columns is determined by a 


numerica. 


key based on the keyword. After constructing the matrix, the letters in 


the keyword are numbered alphabetically. The columns are then extracted 


according to the resulting numerical key. 


Keyword- CALIFORNIA 


21543786 


Resulting sequence: 


ADQZCBPYFHUIGTLESNMXOJVRKW 


Keyword- VERMONT 


7152436 


Resulting sequence: 


EBJWMDLYNGQOFPZRCKXTHSVAIU 
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c. Route transposition sequences are formed by any other systematic way of entering 
sequences into a matrix and extracting them from a matrix. They can be based on 
standard or keyword mixed sequences. The samples in Figure 4-1 show some of the 
common routes that can be used. The last two omit the letter J for the convenience 
of a square matrix. 


Keyword— TEXAS 


In by rows: Out spirally: 


»* TEXAS 
»BCDFG 


PHIIKL 

»>MNOPQ Y 

yRUVWY 

»Z 

- ZRMHBTEXASGLOY WVUNICDFKPOJ 
Keyword— WYOMING 

In by columns: Gut by diagonais: 
vYYY eer 
WAIT WK YT 
YBKU VY eK, 
OcLY TOCEN, 
MDP X =>) 1M DE x, 
1E QZ IVE QZ 
NFR ANF R 
GHS 4 Gus 

Gia 


WYAOBJMCKTIDLUNEPVGFQXHRZS 


Standard sequence 
In by zig-zag rows: Out by columns: 
VYVYVYVY 
ABCDE 
KILHGF 
LMNOP 
UTSRQ 
VWXYZ 


AKLUVBIMT WCHNSXDGOR YEFPQZ 


Standard sequence 


In by inverted L pattern: Out by zig-zag columns: 


EDCBAQPONFGMTSRYXULHIKVWZ 


Figure 4-1. Route transposition. 


4-4, Decimation Mixed Sequences 


Decimation mixed sequences are produced from a standard or keyword mixed 
sequence by counting off letters at a regular interval. 


a. As an example, consider decimating a standard sequence at an interval of 3. The 
new sequence begins with the first letter of the basic sequence, in this case, A. The 
second letter of the new sequence is the third letter that follows from the basic 
sequence, D. Every third letter is selected until the end of the basic sequence is 
reached. 


Basic sequence: 
ABCDEFGHIJKLMNOPQRSTUVWXY2Z 
Resulting decimated sequence: 


ADGIMPSVY... 


The count then continues as if the sequence were written in a circle. The next letter 
after Y, skipping Z and A, is B. The complete resulting sequence is shown below. 


ADGIMPSVYBEHKNQTWZ2CFILORUX 


b. The interval should have no common factors with the length of the sequence. Since 
any even number has a common factor of 2 with 26, only odd numbers are selected 
with 26 letter sequences. Intervals with common factors are not selected, because 
the count will return to the starting point again before all the letters are used. The 
interval should also be less than half the length of the sequence, because larger 
numbers will just duplicate in reverse order the sequence produced by a smaller 
number. An interval of 23, for example would produc the same sequence as an 
interval of 3, but in the reverse order. For a 26 letter sequence, the only usable inter- 
vals are 3, 5, 7,9, and 11. By counting either left to right or right to left, all the basic 
decimated sequences can be produced. 


c. Study of this method of decimation is particularly significant, because the solution 
of some es of polyalphabetic ciphers can yield sequences in a decimated order 
instead of the original order. 


d. An alternate method of decimation is occasionally encountered. In the alternate 
method, each letter is crossed off as it is selected and that letter is not counted 
again. The restrictions on intervals do not apply to this method, because the 
starting letter can never be reached again. This method is used less, because it is 
subject to mistakes in the counting process that are hard to detect and correct. 
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4-5. Types of Mixed Cipher Alphabets 


As mentioned at the beginning of this section, a mixed alphabet is any alphabet that 
uses one or more mixed sequences. The simplest types are those which use a standard 
sequence in one component and a mixed sequence in the other. These are the easiest 
for a cryptanalyst to reconstruct. Next in order of difficulty are those in which the 
same mixed sequence is used in the plain and cipher components. Most difficult are 
those in which two different mixed sequences are used. The next section shows how to 
recover each of these types of alphabets. 


Section II 


Recovery of Mixed Cipher Alphabets 


4-6. Alphabet and Plaintext Recovery 


Although this manual separates the techniques of ase recovery from plaintext 
recovery, the two processes will usually occur simultaneously, each supporting the 
other. When an orderly structure is found in an alphabet as individual letters are 
recovered, the orderly structure often helps make more plaintext recoveries. The 
techniques explained in this section will be used in the next section. 


a. You usually begin reconstruction by recording recoveries in the form of an enci- 
phering alphabet. An ye alphabet is one in which the plaintext component 
is arranged in A through Z order. Ciphertext letters are written in the cipher compo- 
nent paired with their plaintext equivalents in the plain component. The plaintext 
can be either the to aehoten letters, but whichever you select, you should follow 
it consistently in the alphabet as well as the cryptogram. Inconsistency leads to 
errors. In this manual, plaintext is placed above ciphertext. 


b. A deciphering alphabet is one in which the ciphertext is written in A through Z 
order. Rearranging the alphabet into deciphering order is sometimes helpful in 
alphabet recovery. 


c. Whenever systematically mixed alphabets are used, you should attempt to recover 
the systems and keys in use. The same sequences are often reused, either at dif- 
ferent alignments of the same alphabet or in combination with other sequences. The 
solution can be reached much quicker when you recognize and take advantage of 
previous recoveries. 


4-7. Reconstruction of Alphabets With One 
Standard Sequence 


Whenever one of the two sequences is a standard sequence, recovery of the system used 
to produce the other sequence is made much easier. 


a. The easiest type to recognize is the keyword mixed sequence. Any keyword mixed 
sequence has two parts—the keyword and the alphabetic progression. If you find 
that recovered letters are falling in alphabetic progression consistently in a portion 
of the sequence, it is probably a keyword mixed sequence. In this case, you can 
narrow down the possibilities of unrecovered letters. Consider the following par- 
tially recovered alphabet. 


P? abcdefghijkimnopqrstuvwxyz 
c: § Z Vv TH DFGI 


(1) The letters DFGI appear to be part of the alphabet section of the cipher 
ae aa The alphabetic progression continues at the left with the letters S 
and Z. All the other recovered letters appear to be part of the keyword. Between 
the H and the D there is room for only two of the letters at the beginning of the 
alphabet—A, B, and C. At least one of these must be in the keyword, leaving 
the other two as probable equivalents of plaintext P and Q. Similarly, there is 
space for only three letters between S and Z. T and V already appear, so the 
spaces must be filled by three of the four letters, U, W, X, and Y. Given these 
limitations, recovery of more plaintext is likely. Continuing the example, con- 
sider that plaintext C, F, L, P, W, and Y are recovered next. 


P:? abcdefghijktimnopgqgrstuvwxyaz 
ces X ZL Vv Oo THB ODFGI K P 


(2) These recoveries enable several more probable letters to be placed by 
alphabetical progression. 


P? abcdefghijktimnopgqgrstuvwxyaz 
er 5 XYZL Vv O THBCDFGIJIK P 


(3) At this point, we can see that A and E must be in the keyword, because there is 
no room for them in the alphabetic progression. U or W must be in the keyword, 
because there is only room for one of them between 5 and X, and V is already 
placed. Similarly, M or N and Q or R must be in the keyword. Q is unlikely, 
even though U is available to pair with it. Placing Q and U anywhere in the 
blanks in the keyword suggests nothing further. R must be in the keyword, then. 


(4) The letter after L in the keyword must certainly be a vowel or the keyword 
would be unpronounceable, and that vowel represents plaintext G. With the 
possibilities narrowed down this far, you might be able to spot the keyword 
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without referring back to the cryptogram that as the partially recovered 
alphabet. The complete alphabet looks like this. 


p: abcdefghijkIimnopgqgrstuvwxyz 
ec: SUXYZLEAVNWORTHBCDFGIIKMPQ0 


b. Recovery of decimated sequences is a straightforward process of trying out inter- 
vals. Just as a decimated sequence is produced by counting at a regular interval, 
the original sequence can be revered by counting at a regular interval, too. A par- 
tially recovered alphabet with a suspected decimated sequence in the cipher com- 
ponent could look like this example. 

P> abcdefghijkIimnopqrstuvwxyz 

cs N...D...X..F.~.WH..MV...K... 

(1) To determine if this is a decimated sequence, various intervals can be tried. 
The recovered letters suggest one obvious possibility. The letters V, W, and X 
all appear among the recovered letters. If they were in order in the base 
sequence used to generate the decimated sequence, they should reveal the in- 
terval. The interval from V to W and from W to X is -5 in each case. A trial 


decimation at -5, beginning with V produces the following sequence. 


VWX...H.D....- N..F..KM.... 


(2) This sequence of letters appears to be a keyword mixed sequence. The keyword 
appears after the VWX and alphabetic progression resumes with the F and the 
KM. Once you recognize this structure, you can use it to assist in further plain- 


text recoveries just as in the first example shown in paragraph 4-7a} The original 


basic sequence used to produce the decimated sequence is shown below. 


RHODEISLANBCFGJKMPQTUVWXYZ 


c. Simple transposition mixed sequences often resemble decimated sequences. You 
will often see a regular spacing of adjacent low frequency letters, just as we saw 
VWX in the previous example. This is not caused by a decimation interval, but by 
the regular length of columns separating the letters. Recovery of the generation 
method of transposition mixed sequences is accomplished by rebuilding the original 
matrix. 


Pp: abcdefghijkimnopqrstuvwxyz 
c: U FOV P X K YI! RZGD T E 


p: 
cs 


The almost regular spacing of the letters V, X, Y, and Z resembles a decimated 
sequence, but the interval is not constant. This almost, but not quite, regular 
spacing is an indication of simple columnar transposition. The letters V, X, Y, and 
Z are probably the bottom letters in their columns of the original matrix. W, which 
has not been recovered, probably occurs in the keyword, because there does not ap- 
pear to be room for a column ending with W. Analysis of this type of sequence 
proceeds by rebuilding the columns. Placing the letters V, X, Y, and Z in sequence 
with their preceding letters as their columns, produces this partial result. 


abcdefghijktimnopgqgrstuvwxya2z 
Ui PO: Vii POX ow Kew V/ 1. ROZ/GID oT we Es 


Now the initial reconstruction appears successful. The rows above VXYZ also show 
alphabetic progression developing. Q can be inserted in the next to last row with 
confidence. The next step is to place the rest of the letters into columns that would 
continue the structure in a logical way. A little trial and error will show that the 
columns before the V column end with T and U. The U was not the top of the V 
column, but the bottom of the preceding column. 


abcdefghijkIimnopgqgrstuvwxyz 
U/. FOV/. .PX/..KQY/1..RZ/GD.T/E. 


4-9 


4-10 


jon 


U 


The longer columns belong on the left. Shifting these columns produces this result. 


The matrix is now in its original form. L, M, and N can be placed between K and O. 
Either H or J can be inserted between F and K and the remaining letter belongs in 
the keyword in the top row. S and W are in the keyword, because they are missing 
from the alphabetical progression. That leaves A, B, or C for the remaining letter of 
the keyword, with the other two on the second row. Since only one vowel has been 
found in the keyword up until now, A probably belongs in the keyword with B and C 
filling the blanle in the second row. Trial placements of A, 5, and W together in the 
first row blanks, together with either H or J in the remaining space leads to the con- 
clusion of JIGSAW as the keyword. 


. The recovery of numerically keyed columnar transposition sequences is the same as 


for simple columnar transposition, except the columns are not in order in the 
sequence. The next example shows the recovery of this kind of transposition mixed 
sequence. 


>abcdefghijkIimnopqarstuvwxyz 
> XMDBZP.TY..~.SUIRW.COVI.L.H. 


This problem is again best approached through the end of alphabet letters. V, W, 
X, Y, and Z have all been recovered, and they make a good starting point. V, W, X, 
Y, and Z are placed in a row with their preceding letters above them in columns. 


psabcdefghijkimnopqrstuvwxyz 
c: X/MDBZ/P.TY..SUIRW/.COV/I.L.H. 


This time no alphabetic progression appears even if we consider that one or two of 
the columns might be misplaced. In this case, the next thing to consider is that the 
sequence may be reversed. Selecting the letters to the right of V, W, X, Y, and Z 
instead of the left produces the following example. 


abcdefghijkIimnopqrstuvwxyz 
XMDB/ZP.T/Y..SUIR/W.CO/VI.L.LH. 


This setup is clearly correct. Next, we add the two short remaining segments. 


abcdefghijkIimnopqrstuvwxyz 
X MD B/Z P.T/Y . . S/UITR/W.. CO/VI.L/.H./ 


_——— | Eee 
EN an i Oe 


lola wixisicl 
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Moving the short columns to the right and filling in the missing letters produces the 
following matrix. 


>abcdefghijkimnopgqrstuvwxyz 


IQHE/ 


viwixly|z} | | 


The final step is to recover the numerical key. If normal methods are used, it should 
be produced by the keyword and should show the actual order in which the columns 
were extracted. Numbering the letters in the keyword in alphabetical order and 
comparing them with the cipher sequence in the alphabet confirms that this 
method was used. Since the sequence was reversed, the order of columns in the 
cipher sequence appears in right to left order beginning with the cipher letter B. 


abcdefghijkIimnopgqrstuvwxyz 


c: X MD B/Z PG T/Y NF S/U I R/WK C O/V J AL/QH E/ 


1 7 6 5 4 3 2 


e. One type of transposition sequence remains to be considered. When a route 


transposition process is used, the solution is to try to reconstruct the original routes. 
In examining attempts to solve the matrix by rebuilding columns, be alert to entry 
routes other than by rows. Look for spirals, diagonals, and alternate horizontals or 
verticals. If rebuilding the columns produces no results, consider rebuilding spiral, 
diagonal, or alternate row or column routes. This manual does not show examples of 
these approaches, but if you encounter this situation, approach it logically and try 
various approaches until one succeeds. The techniques of solving route transposi- 
tion ciphers explained later in this manual will help in this process. 


f. Each of the preceding examples was approached as if we knew, perhaps from past 
history, what types of sequences were used. We assumed that the plain component 
was a standard sequence, and the cipher sequence could then be readily reconstruc- 
ted by itself. It is common, in approaching a cryptanalytic Livaea to assume the 
simplest case and only to move on to more complex possibilities when the simplest 
case must be rejected. A great deal of time can be wasted by assuming something is 
more complicated than it is. 


g. The next simplest case is where the cipher sequence is a standard sequence and the 
plain sequence is mixed. When reconstruction attempts fail because you started 
with an enciphering alphabet, rearranging the alphabet into a deciphering alphabet 
may yield results. Once rearranged, the solution is approached just as we did in the 
above examples. Look for short alphabet progression to indicate keyword mixed 
sequences. If that is not found, see if a decimation was used. If decimation was not 
used, try reconstructing the columns of a columnar transposition. Remember to try 
forward and reversed sequences. 


h. If none of these approaches yields results, either with an enciphering alphabet or a 
deciphering alphabet, other approaches are called for. Either there are two mixed 
sequences, a more complex process was used, or random sequences were used. 


4-8. Reconstruction of Alphabets With Two Mixed 
Sequences 


Recovering alphabet structure when both sequences are mixed is more difficult than 
the previous examples. You are much less apt to be successful with only partial 
recoveries. Where the alphabet could be reconstructed during the solution of the plain- 
text in the previous examples, reconstruction of an alphabet with two mixed sequences 
must usually wait for the full solution of the plaintext. The examples in this section 
will begin with a fully recovered, but not reconstructed, alphabet. 


a. The easiest type to recover with two mixed sequences occurs when both sequences 
are keyword mixed, as in the next example. 


p> abcdef ghijkimnopgqgrstuvwxyz 
c: WX YZUBPTADGERCQSFVHIIJKLMNO 


ifnjlqkstuvwxyzgompherabed 
c=: ABCDEFGHIIJKLMNOPQRS TUVWXYZ 


me) 


Enciphering and deciphering forms of the same alphabet are shown. The under- 
lined portions show substantial alphabetic progression in both, which is typical of 
alphabets with keyword mixed sequences. A transposition or decimation would not 
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produce such an obvious progression. The underlined portions in both alphabets are 
probably in their original form. The remaining plain-cipher pairs are out of order. 
Your task is to reconstruct the original order. The usual approach at this point is to 
try to extend the ae progression outward from the obvious progression. In 
this case, the enciphering alphabet shows two long alphabetic strings of cipher let- 
ters, HIJKLMNO an YZ, which must have some or all of the letters 
PORSTUV in between. Similarly, the deciphering alphabet shows plain- 
text strings ABCD and STUVWXYZ, and some or all of the letters 
EFGHIJKLMNOPQR must be in between. Suppose the cipher letters PQRSTUV 
belong in exactly that order. If that is the case, then the plaintext letters 
GOMPHER must also be in the right order, preceding ABCD. We expect to find the 
keyword immediately before the beginning of the alphabetic sequence. 
GOMPHER, while not a recognizable word may be close to it. If we try GOMPHER 
as a keyword, then the remaining letters must be in alphabetical order. Adjusting 
the alphabet so GOMPHER is a trial keyword will produce this arrangement. 


: fi j kl nqgstuvwxyzgompherabecd 
> BADGECFHIIJIKLMNOPQRS TUVWXYZ 


Now the cipher sequence shows a recognizable word, BADGE, but the solution is 
incomplete. If we move the M-R pair so that plaintext M fits in alphabetic order 
instead of the keyword, we see the following alphabet. 


p: fijkimngstuvwxyzgopherabecd 
c: BADGERCFHIIKLMNOPQSTUVWXYZ 


This rearrangement is the original sequence of the alphabet. 


b. When transposed or decimated sequences are used in the alphabet, the solution is 


p: 
cs 


much more difficult. The alphabetic progression used in the previous example is 
not available to assist with reconstruction. A solution is still possible in many cases, 
however. When both sequences are the same sequence in the same direction, the 
alphabet can often be recovered quite readily. 


abcdefghijkIimnopgqgrstuvwxy az 
LQMNIPXSTVGWZURAKFEDIJIYBCOH 


(1) Reconstruction begins with a process called chaining. Use the plain-cipher 
pairs to create a 26 letter chain by linking the cipher letter of each pair to the 
pair with the same plaintext letter. Any pair can be used as the starting point. 
Beginning with the plaintext A-ciphertext L pair (abbreviated Ap-Lc) next find 
plaintext L. Plaintext L equals ciphertext W (Lp-Wc), producing a partial 


chain of ALW. Continuing with Wp-Bc, the chain is extended to ALWB. Con- 
tinue adding links to the chain until you return to the original letter A. The 
complete chain is shown below. 


ALWBQKGXCMZHSEITDNUIVYORFP 


(2) Since we were able to produce a 26 letter chain, there is a strong indication that 
the same sequence was used in both components. With different sequences, the 
chances of producing such a chain are very low. Unrelated sequences will almost 


always return to the starting point before using all 26 letters. The alphabet in 
paragraph 4-8a] for example, produces separate 23 and 3 letter chains. 

(3) The sequence produced by chaining an alphabet with two identical sequences in 
the same direction will always either be the original sequence or a decimation of 
the original sequence. This narrows the possibilities for the original sequence 


down to six. The chained sequence and its five possible decimations are listed 
below. 


Chain: 
ALWBQKGXCMZHSEITDNUIVYORFP 
Decimation 3: 
ABGMSTUYFLQXZEDIOPWKCHINVR 
Decimation 5: 
AKZTYPQMIJFBCEURWXSNOLGHDY 


Decimation 7: 
AXIYWMDRQHUPGEVLCTOBZNFKSJ 


Decimation 9: 
AMULZIWHVBSYQEOKIRGTFXDPCN 


Decimation 11: 
AHOXUBIPZYGNWEFMVKDLSRCIQT 


(4) If the original sequence was a decimated sequence, the basic keyword or stan- 
dard sequence used to generate the decimated sequence would be one of the 
above. Since none of them are either standard or keyword mixed, the original 
sequence was probably transposed. ae each sequence above with 
transposition in mind, the letters V, W, X, Y, and Z have been underlined in 
each, searching for a basis to rebuild the columns. The last sequence (decima- 
tion 11) yields the following matrix. 


xiz{ {tT 
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(5) When the same sequence is used in the same direction in both components of 
the alphabet, a 26 letter chain will only be produced half of the time. When the 
two sequences are staggered by an odd number of letters, a 26 letter chain 
results. When the two sequences are staggered by an even number of letters, two 
separate 13 letter chains result. These can sometimes be recovered, too, but the 
solution is more difficult. 


c. The chaining technique can also be used with alphabets with different sequences in 
the two components if they are reused at different alignments. Consider the next 
two alphabets, recovered at different times on the same day. 


p: abcdefghijkIimnopgqgrstuvwxy2z 
ec: YPUZGEABHQVMCLKIRTWODIS XNF 


abcdefghijkIimnopgqrstuvwxy z 
c: FLAGYPTUZEBHQKXVMNCIRWODJIS 


~ 


(1) To test if the same alphabet was used, chain the cipher sequences against each 
other. In the example, chain A of the first to T of the second, T of the first to N 
of the second, and so on. This produces the following chain. 


ATNIWCQEPLKXDRMHZGYFSOIVBU 


(2) This confirms that the two alphabets used the same sequences at different 
alignments. If chaining produced anything but one 26 letter sequence or two 13 
letter sequences, they are not the same alphabet. 


(3) Write all possible decimations, as before. 


Chain: 
ATNIWCQEPLKXDRMHZGYFSOIVBU 


Decimation 3: 
AJQLDHYOBTWEKRZFIUNCPXMGSV 


Decimation 5: 
ACKHSUWLMFBIPRYVNEDGITQXZO 


Decimation 7: 
AEMONLZVWXYUQRSTPHIIKGBCDFE 
Decimation 9: 
ALYTKFNXSIDOWRICMVQHBEZUPG 


Decimation 11: 
AXIEYIMUKOQGNRBLSCZTDVPFWH 


(4) The decimation of 7 produces a sequence that almost looks as if it were the 
original. This can happen when the decimation interval and the column length 
of a transposed sequence are the same except for one long column. The correct 
sequence is a decimation of 9 read in reverse. 


The sequence used to generate the simply transposed sequence was a keyword 
mixed sequence based on LEMON. 


The plaintext component can be reconstructed now that the correct ciphertext 
sequence is known. We start with the decimated sequence. Since the sequence 
with a decimation of 9 was used in reverse to recover the keyword LEMON, we 
will list it in reverse. 


— 
o1 
— 


ec:GPUZEBHQVMCIRWODISXNFKTYLA 


Either of the two alphabets given at the start of this problem can be used to 
reconstruct the plaintext sequence. The first alphabet is repeated for reference. 


p> abcdefghijkIimnopqrstuvwxyz 
cs YPUZGEABHQVMCLKIRTWODISXNF 


We now rearrange this alphabet so that the cipher sequence is in the same order 
as the recovered decimated sequence. 


ebcdfhijkimpqstuvwxyzorang 
ec: GPUZEBHQVMCIRWODISXNFKTYLA 


vu 


d. The chaining techniques introduced in this section are also used in the solution of 


polyalphabetic ciphers. They will be further developed ir| Part Four} 


4-17 


4-18 


Section III 
Solution of Monoalphabetic Unilateral 
Ciphers Using Mixed Cipher Alphabets 


4-9. Preparation for Analysis 


The first step in approaching the unsolved cryptogram is to prepare a worksheet. 


a. If prepared by hand, one-fourth inch or one-fifth inch cross section paper (graph 
paper) should be used if possible. Hand lettering should be clearly printed in ink. 
The cryptogram should be triple spaced vertically to leave room for writing. If a 
copying machine is available and local security rules permit, the worksheet should 
be oe after preparation to permit a restart with a clean worksheet whenever 
needed. 


b. Generally, you will want to prepare at least a unilateral frequency count. Other 
special frequency counts may be needed also, as will be pane ater. If you are 
unsure of system identification, you may want to calculate the IC. Computer sup- 
port, if available, can save a lot of time at this step. 


c. Next, you should scan the text searching for repeated segments of ciphertext. 
Underline all repeats you find of at least three letters in length. You may find it 
useful to underline two letter repeats, too. 


pe 


If you have more than one cryptogram that appears to have been enciphered with 
the identical system, prepare a worksheet for each. Compare peaks and troughs of 
frequency counts to see if they are similar. If so, look for repeats between messages 
as well as within messages. Repeats between messages are another indication that 
the identical system was used. The more repeats you find, the easier the solution 
will be. 


. If you are still in doubt whether two cryptograms have been enciphered by the same 
system, there is a simple statistical test available, similar to the phi test. The chi 
test or cross product test compares two frequency distributions to determine the 
probability that they are from the same alphabet. The frequency of each letter in 
one distribution is multiplied by the frequency of the same letter in the other dis- 
tribution. The results of all the multiplications are added to produce the chi value. 
Chi is the Greek letter that looks like an X. The formula fot the chi value is— 


fe) 


X = & (f)(f2). 


The expectation with a random match is 1/26th of the product of the total letters of 
each, or— 


Xr = .0385 (N1)(N2). 


With a correct match, the expected value is .0667 times the products of the total 
letters, or— 


Xp = .0667 (N1)(N2). 


The results can also be expressed as an index of coincidence, the usual form if 
produced by computer support. The formula for the cross IC, as itis called is— 


X IC = Xo = 26 5 (f1)(f2) 
Xr (N1)(N2) 
With a correct match, the expected IC value, as with the phi text is 1.73. If you 


match two alphabets and the X IC is close to 1.73, the chances are that they were 
enciphered with the same alphabet. Figure 4-2 illustrates a completed chi test. 


PROBLEM: To determine if the two frequency counts below were from cryptograms enciphered 
with the same alphabet. 


cl: ABCDEFGHI J LMNOPQRSTUVWXY2Z N=69 
- 326113- 33 - -~623341--10- 1-441 


cz: ABCDEFGHIIJKLMNOPQRSTUVWXY2Z N=6] 
421617-4-12-+-513443-418-1412 


Product: 


-6 236191- 12-- 6 - 302 912163- -s0- 1 


16 ae © tie: 
Xo = (f)(f2)=6 + 2+ 364+..4+8= 315 
Xr = .0385 (N1)(N2) = .0385 (69)(61) = 162 


X IC = Xo/Xr = 316/162 = 1.94 


| The results indicate the same alphabet was used. | 


Figure 4-2. Chi test. 
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f. As with any statistical test, you should use this as a guide only, and take all other 
available information into consideration, too, For example, if you find several long 
repeated segments of text between two cryptograms, it is probably a waste of time to 
calculate a chi test by hand. You already have the evidence you need to make a deci- 
sion as to what approach you will use to reach a solution. 


4-10. Approaches to the Solution 


There are two basic approaches to the solution—the probable word method and the 
brute force approach. The probable word method is to try to gain a quick entry into the 
system by correctly assuming a portion of the plaintext. The brute force approach is to 
systematically narrow down the possible keys to the system and then force a solution 


by exhaustively trying all those possible keys. The method in thd previous chapter] of 


solving standard alphabet systems through trying all possible decipherment is a good 
example of the brute force oe In practice, the solution of any given system is 
likely to use a combination of the two approaches. 


4-11. Solution With Known Sequences - Completing 
the Plain Component Sequence 


When the sequences used in an alphabet are known, a quick forced solution is possible. 


a. Although mixed alphabets are used instead of standard ones, the solution is exactly 
the same as that explained in| paragraph 3-7b 


(1) Set up the known alphabet at any alignment. 
(2) Perform a trial decipherment (pseudotext). 
(3) Using the trial decipherment as the letters at the head of the columns, generate 


all possible decipherment by listing the plain component sequence vertically 
for each column. 


b| Figure 4-3/illustrates the solution of a cryptogram with known sequences using the 


aDOVe Steps. 


Solve: LIZWF QFMYK LOILX 


Plain component—keyword mixed sequence based on SEA URCHIN. 


Cipher component—standard sequence. 


Step 1. Set up the alphabet at any alignment. 


ps Sseaurchinbdf gj klmopqatvwxyz 
c:- ABCDEFGHIIKLMNOPQRS TUVWXYZ 


Step 2. Perform a trial decipherment. 


p: fnzwe mcgyd fknfx 
c: LIZWF QFMYK LOILX 


Step 3. Complete the plain component sequence. 


FNZWC MCGYD FKNFX 
GBSXH 
JDEYI 
KFAZN 
LGUSB 
MIRED 
OKCAF 
PLHUG 
QMIRI 
TONCK 
VPBHL 
WQDIM 
XTFNO 
YVGBP 
ZWIDO 
SXKFT 
EYLGV 
AZMIW 
USOKX 
REPLY BYCOU RIER 
CAQMZ 
HUTOS 
IRVPE 
NCWQA 
BHXTU 
DIYVR 


P: Seaurchinbdfgjyktitmopqtvwxy2z 
cs HI JKLMNOPQRSTUVWXYZABCDEFG 


Plaintext! REPLY BY COURIER 


Figure 4-3. Completing the plain component. 
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4-12. Probable Word Method 


The probable word method of solution depends on your being able to correctly identify 
a portion of the plaintext. When you can do this, you can begin to reconstruct the keys. 
The partial key recoveries lead to more plaintext recoveries, and by working back and 
forth between keys and plaintext, you can complete the solution. There are many ways 
in which you can identify plaintext. The more you know about the senders of 
siciohered traffic and the situation in which it was sent, the more likely you are to be 
able to assume plaintext correctly. 


a. Stereotypes. Military organizations tend to do things in standard ways. Rules for 
message formats are likely to be used. Standard forms are likely to be used for 
recurring needs. When you learn a about the sender's standard ways of doin 
things, you can use those standards. Standard formats are most likely to be foun 
in message beginnings and endings. Messages are likely to begin with addressees, 
message subjects, security classifications, and references to other messages. 
Messages are likely to end with signatures or unit identifications. These stereotypes 
are bad security practices, but difficult to avoid. 


(1) Consider the following example of a message where stereotypes can be used to 
achieve a quick solution. The previous message from the same sender, already 
recovered, began, TWO PART MESSAGE PART ONE. The text gave the 
itinerary of a a team of officers from an allied country, but was incom- 
plete. A mixed alphabet was used with the previous message, but it has 
changed with the new message. 


ZZZZZ NSHIX LNFOM MXKOI XLNNS HNOXF STDDR OIXLN XNMTU NOOGN 


ETLNV EHPLM YVEOD TZHIN OLLDA HGOMZ HFFXG RTGKX ZZZZZ 


(2) The first and last groups (ZZZZZ) are obviously not part of the text of the 
message. They are probably indicators of some kind. 


(3) We begin by preparing the following worksheet with a frequency count and 
underlined repeats. The indicator groups are not included in the frequency 
count. 


NSHIX__LNFOM MXKOI XLNNS _ HNOXF 
STDDR OIXLN XNMTU NOOGN ETLNV 
EHPLM YVEOD TZHIN OLLDA HGOMZ 
HFFXG RTGKX 


abcdefghi 


jk lmnopqrstuvwxyaz 


ONE, we would assume that it would begin TWO PART MESSAGE PART 
TWO. The underlined repeats are positioned perfectly for the repeated words 
TWO and PART, so the assumption seems well borne out. 


(5) Next, we enter the assumed text in the message and the alphabet. Using those 
recovered values throughout the message produces the text shown below. 


omma 
HF FXG R 
pr: abcde 
c: X ce) 


t 
N 


=O 


m 
F 


a 
X 


G 


g 
K 


e 
oO 


ra 


On 


) 
I 


Aca 
On 
~<~w 


s $a 
M MX 


zu 
- 
Cc 
ae 


t at 
N XN 


ro 
=o 
Ze 
Oo 


DTZ 


a 
X 


ijk imnoop 
F HI! 


Oo ita 


ra 


q 


e 
ce) 


r 
L 


On 


rstuvwxyz 


L 


MN 


S 


(6) From the recovered ciphertext letters, it appears that the cipher sequence is 
keyword mixed. On that basis, ciphertext G and J are placed in alphabetical 


order. 


P 
I 


~*~ a 
r 


two 
NSH 


w e 
STDDR O 


ae] 
® 
o 
a 
a. 
e 


Ze 


oO 
~o 


m3 


os ™ 


A oa 


lok.) ra Oo 


Roa 


Ju 
Zu 
~ ow 
Aoa 
Oo 
oO 
~*~ 


Ze 
~~ @ 
Ze 
Zu 
| 
Cc 
Ze 


iv) 
4 
N 
ro 
—o 
Ze 
On 


hi jktimnoo p 


FGH I 


ra 


Oo 


ts Oo 


On 


stuvwxy z 


MN 


S 
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(7) Several possibilities for additional ee appear in the message with these 
additions. You may see other possibilities but for illustration, we will add the 
letters for the word COMMANDING appearing at the end of the message. 


twopa rtmes sagep arttw oteam 
NSHIX LNFOM MXKOIXLNNS HNOXF 
wii d epart ats i teent ir 
STDDR OIXLN XNMTU NOOGN ETLNV 
° ros e icopt err onesc 
EHPLM YVEOD TZHIN OLLDA HGOMZ 
omman dinga 

HF FXG RTGK X 

Pp: abcdef ghijkimnopqrstuvwx yz 
e:s X ZRO K_ T FGHIJLMN Ss 


(8) Additional placements are possible. Ciphertext Y belongs between X and Z. P 
and Q fit between N and S. U, V, and W fit between Sand X. The first word on 
the second line appears to be WILL. The phrase SIXTEEN THIRTY HOURS 


appears. 
twopa rtmes sagep arttwoteam 
NSHIX LNFOM MXKOI XLNNS HNOXF 
wiltidepart atsix teent hirty 
STDDR OIXLN XNMTU NOOGN ETLNVYV 
h pt errti onesc 
E IN OLLDA HGOMZ 


ro 
gc 
ma 
Zu 
a <2 
y <“< 
mo 
Oo 
O- 
qm 
NO 
mo 


p> abcdefghijkimnopgqrstuvwxryaz 
ec: XYZRO KET DFGHIJLMNPQSUVW 


Only the ciphertext letters A, B, and C remain to be placed. Of those, only A is 
used in the text, and it appears to be part of the commander’s name. If C is 
placed as part of the keyword ROCKET and A and B placed in alphabetical 
order, the commander's name becomes R L JONES. The plaintext is TWO 
PART MESSAGE PART TWO TEAM WILL DEPART AT SIXTEEN 
THIRTY HOURS BY HELICOPTER R L JONES COMMANDING. The com- 
plete alphabet is shown below. 


P> abcdefghijkimnopqrstuvwxyaz 
c: XYZROCKETABDFGHIJLMNPQSUVW 
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b. Exploitation of Numbers. Not all cryptograms will include such stereotyped 
beginnings and endings. Without these stereotypes, repeated words in the text offer 
another possible point of entry. Spelled out numbers are often easy to recognize 
when they repeat in messages, as shown in the next example. 


HWBNF WAZAO URRWL WWZMU OJRNE 
JIYISI RIOQW EUDRC WRS ZN NPWAZ 


RCWEN BNOKF GNZWE UDRSZ NNGNZ 


:abcdefghijkimnopqrstuvwxyaz 


a Dv 


HTH NS 


(1) The pattern of consecutive short three- to five-letter repeats is characteristic of 
numbers. Numbers tend to occur with each other in such things as grid coor- 
dinates, times, and quantities. In the above example, the repeated RSZNN 
must be THREE, the only five letter number to end in a double letter. We begin 
2 placing THREE in the alphabet and entering other occurrences of the same 

etters. 


= 
Cc 
Oo 
Q 
FS 
Zo 
(tt 


c tt 
HWBNF WAZAO URRWL WW 


az No 
Zo 
zo 
~ 
<a 
> 
Noa 


t t t 
JIYISI RIOQW EUDRC WR 


t e e er 
RCWEN BNOKF GNZWE UD 


WO et 
az NO 
No 
Zo 
Zo 
2) 
Zo 
Na 


r 
WAZ EXXXX 


™ 
wa 
- 


p> abcdefghijkIimnopgq uvVWwxrxy2z 
c 


N S Z R 
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(2) The recovered letters suggest additional numbers. RCW, which begins with 
plaintext T must be TWO. GNZW, which includes ER as the middle two letters 
must be ZERO. EUD, which has no letters in common with THREE, TWO, or 
ZERO, can only be SIX. 


° e ° cr itto oor i tes 
HWBNF WAZAOQOQ URRWL WWZMU OFJTRNE 


h t o sixtwothreeoe ° r 
JIYISI RIOQW EUDRC WRS ZN NPWAZ 
twose e zeros ixthr eezer 
RCWEN BNOKF GNZWE UDRS5S NNGN Z 


o ho ros 

WSWAZ EXXXX 

P> abcdef ghijk!imnopgqgrstuvwxyz 
c N SU W ZER cD G 


(3) Several more possibilities can be placed at this point. Ciphertext F can be 
placed between D and G in the cipher sequence as the alphabetical structure 
begins to appear. The last word of the message is apparently HOURS, needing 
only the U to complete it. The partially repeated FOUR can be seen at the end 
of line two, and SEVEN follows TWO on the third line. 


ovey ourun itto oor ion tes 

HWBNF WAZAO URRWL WWZMU OJRNE 
h t n o sixtw othreefour 

JYISI RIOQW EUDRC WRSZN NPWAZ 

twoseven y zeros ixthr eezer 

RCWEN BNOKF GNZWE UDRSZ NNGNZ 

ohour s 

WSWAZ EXXXxX 

p: abcde fg ijkimnopqrstuvwxrxyz 

c N P SU Ow ZERABCODFG 
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(4) The first word is MOVE. Q can be placed between P and S in the oe 
sequence. The word BY completes the third line. With ciphertext K placed from 
the word BY, ciphertext L and M can also be placed. 


movey ourun ittocoordi a tes 
HWBNF WAZAOQ URRWL WWZMU OJRNE 

h t ngo sixtw othre efour 
JYISI RIOQW EUDRC WRS ZN NPWAZ 
twose venby zeros ixthr eezer 
RCWEN BNOKF GNZWE UDRSZ NNGNZ 


ur 
AZ EXXXxX 


abcdefghijkimnopqrstuvwxyz 
KLMNPQS U HOW ZERABCDFG 


ao 7 | sO 
us 
ao 


(5) COORDINATES online one provides the plaintext letter A as ciphertext J. 
With J placed in the alphabet, the letter | must be in the keyword, along with T, 
which will not fit in the alphabetic progression. The keyword is therefore 
HOWITZER. The complete plaintext is MOVE YOUR UNIT TO COOR- 
DINATES ALPHA TANGO SIX TWO THREE FOUR TWO SEVEN BY 
ZERO SIX THREE ZERO HOURS. 


c. Word Patterns. When neither stereotypical beginnings and endings nor repeated 
numbers provide a point of entry, repeated words can often be recognized by their 
patterns of repeated letters. 


(1) Such words as ENEMY, ATTACK, and DIVISION have repeated letter pat- 
terns that make them easy to recognize. They are even easier to recognize when 
the words are repeated in the text. Underlining the repeats gives an indication 
of where the words begin and end. For example, ATTACK and BATTALION 
have the same pattern of repeated letters. If the ciphertext OGGORF is 
repeated in the text, it is much more likely to be ATTACK than a portion of the 
word BATTALION. It could also be EFFECT, ATTAIN, or a number of other 
possibilities. 


(2) In the case where two or more words have identical patterns, such as ATTACK 
and EFFECT, letter frequencies can help to decide between the possibilities. If 
the letters O and F of OGGORF are high frequency letters and the rest are fairly 
low, it is more likely to be EFFECT than ATTACK. If all the letters are high in 
frequency, ATTAIN is likely. 


(3) Tables have been compiled of common pattern words for various languages to 
assist in analysis.|Table D-3 in Appendix Dj of this manual provides an English 
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language word pattern table. Word patterns are also called idiomorphs. There is 
a formal procedure for recording word patterns, which is followed in the table. 
When you find a pattern word repeated in a cryptogram, you can follow the 
same procedure to record the pattern and then look it up in the table. The 
procedure is this— 


e Find the first repeated letter in the pattern, and designate all occurrences of 
that character with the letter A. 


GRFLYMFPARP2Z 
A A 


e Continue lettering alphabetically from left to right, making sure that each 
new character gets the next letter of the alphabet and each repeated charac- 
ter gets the same letter. 


GRFLYMFPARPZ 
ABCD B A 


e Stop lettering when the last occurrence of the last repeated character is 
reached. In the example, P is the last occurrence of the last repeated charac- 
ter. The final character Z is not lettered. 


GRFLYMFPARPZ 
ABCDEBFGAF 


e Designate a _ characters before and after the pattern characters with dashes 
to show the length of the word. 


GRFLYMFPARPZ 
-ABCDEBFGAF - 


(4) To use the pattern, refer td Appendix D, Table D-3] The patterns are in 
alphabetical order beginning 0 Se DTS e paten(ABCDEBFGAR 
located on page D-34. The only word listed for this pattern is H EADQUARTER 
5. The extra letters at the beginning and end of the pattern, designated by the 


dashes, fit HEADQUARTERS perfectly. 


(5) The use of word patterns to solve a cryptogram is shown in the next example. 


om>r > > SF 1P 


KQIAYV 
MMUET 
UNNMU 
PMMQI 
GXFSN 
LLTUB 
WNGEU 
UVQAI 
QMQIA 
QxxxxX 


> iO 1c A TM O A YF <€ 10 
cjc jx {ua qc kK m < 4210 
<(oNgia /23 A = GQ > FF Ix 
=z aq €<jaq 2A OIA On Oj 
Oo < tjZz xX O]/A N Bin 
2 0 #+-/]2 < x* {a a afm 
OH jr Diz 2 210 FB Ci]> 
Sir afc im [x NJum 2 fe 
onion >FPIx i> |1O cle alr 


ZiIziz aet<«oaqnrn wt 


abcde 


i?) 
Ua) 

oa 
= 


a 


c> ABCDEFGHIIKLMNOPQR S 


ZES=920°¢ 222 =1972 


#E 


[THA TH AY 
HHH 
tH 
TH 


X 
U 
xX 
A 
G 
Q 
R 
D 
T 


ijktitmnoop 


2 
> 
ie) 
> 
z 
> 
> zc zle z> > BD 


stuvwxrxyz 


(6) The cryptogram shows all repeats longer than three letters. There are a number 
of shorter repeats, too, which will be used if necessary. We begin the analysis by 


deriving my Appendix Dito for the longer repeats. The pattern and possible 


words from| Appendix D/for each repeat are shown below. 


GGXF S&S FMUNNMUXWNG 
BBA - - -ABCCABDEC- 
FFAIR CROSSROADS ? 
TTACH 
TTACK 
TTAIN 
FFECT 
PPOSE 


MQIATQY 


Ss 
E 
R 
I 
I 


ABOTAG 
ASTWAR 
EGIMEN 
NTERNA 
NTRENC 


ABCDA_- 


rrsa om 


2 


=S=ooaqo<n 


Onna mw mi> > 


BA 
BA 
ME 
cl 
M I! 
| 
Vii 
NO 


NA 
CA 
TE 
N 1 
N I 
Li 
Ss! 
PO 


c 


roP,rPpuA Wi 
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(7) CROSSROADS is the only choice for the second patten. There is an extra let- 


ter at the end of the repeat, but that may have been caused accidentally by a 
repeated first letter of the next word in each case. Using CROSSROADS as a 
trial starting point, we compare common letters with the other repeats. From 
CROSSROADS, we see that cipher M equates to plaintext R, for example. 
Examining the possible choices for the MQIATOVG repeat, only REGIMENT 
is consistent with the Rp-Mc pair. Similarly, the Op-Uc and Dp-Wc pairs of 
CROSSROADS are consistent with DIVISION for the WABANAUV repeat and 
no others. The common plaintext N and I between REGIMENT and DIVISION 
also equate to the same cipher letters (V and A) giving further evidence that we 
are on the right track. Using the common letters between CROSSROADS, 
REGIMENT, and DIVISION with the XGGXFS possibilities shows that either 
ATTACH or ATTACK is consistent with the first three. We now place the 
letters of CROSSROADS, REGIMENT, and DIVISION in the alphabet and 
cryptogram. 


attac i egin at er os i 
XGGXF SEAL K Qi V XGIQM UNAHD 
ndredtomorro mornin ginvi 
PVWMQ WGUTU MMUET UMVAV IAVBA 
cinit ° er ssro adst reesi 
FAVAG ZURFM UNNMU XWNGD MQQNA 
t os to ° rregqiim nt i s 
HGEUN GUCZU PMMQI ATQVG EALLN 
ear eadat tac s to di visio 
CQXMD QXWXG GXFSN GUCWA BANAU 
nheomm and i mov ie or ard r 
VFUTT XVWEA LLTUB QRUME XMWRM 
omcro ssroa dst ° iven ineto 
UTFMU NNMUX WNGEU RABQV AVQGU 
road neti onei g tsevensi 
MUXWY PVFGA UVQAI DGNQB QVNAH 
s to o ne iv eregi ome ti sdivi 
NGUCU VQRAB QMQIA TQVGA NWABA 
s c e 

N QxXxXXX 


hijkimnopqrstuvwxyz 
A TVU MNG_ B 


>. 
co 
<3 
= 
Oo 
Zu 
= 08 oOo 
ga 
o< 


(8) With this start, you should be able to see many more possible plaintext words in 


the text. TOMORROW, VICINITY, and ROAD JUNCTION all appear with 


only one or two letters missing. Many spelled out numbers also appear. The 
repeated NGUC is STOP, a common stereotype used in telegraphic text in 
place of a period. EALL is WILL. XGGXFS must be ATTACK. The completed 
plaintext is— 


"ATTACK WILL BEGIN OATS. SIX HUNDRED TOMORROW MORNING 


Y D C AND WILL MOVE 
FORWARD FROM CROSSROADS TWO FIVE NINE TO ROAD JUNCTION 
EIGHT SEVEN SIX STOP ONE FIVE REGIMENT IS DIVISION RESERVE.” 


(9) Use of word patterns is a powerful tool to gain entry into a cryptogram. It will 
not always work out as easily as the example shown here. Repeated letters do 
not always represent repeated words. Many words that are used in messages will 
not be found in the word pattern tables, particularly proper names. Be alert to 
the patterns of repeated letters in names yeu would expect to find in eee 
traffic. If you can recognize the pattern of a word, it does not have to be in the 
tables to use it. 


4-13. Vowel-Consonant Relationships 


When you can successfully discover plaintext words in a cryptogram, the solution 
usually comes quickly. Sometimes you will encounter a cryptogram in which you can 
find no basis to assume plaintext. You can find no stereotypes, no usable numbers, and 
no repeated pattern words. In these cases, you can use the characteristics of the 
language itself to determine individual letters. 


a. Language Characteristics. Languages which use an alphabet to se out words 
phonetically produce exploitable letter relationships. To make words pro- 
nounceable, vowels and consonants tend to alternate. We do not expect to find 
many consonants or many vowels consecutively. In cases where they do, the 
possibilities are limited to pronounceable combinations. Exploitation of these letter 
ee begins by determining which letters are consonants and which are 
vowels. 


(1) Vowels tend to occur next to consonants. Consonants tend to occur next to 
vowels. Each contacts the other more readily than it contacts its own type. 


(2) Since there are more consonants than vowels in English, vowels tend to contact 
more different letters than consonants do. A vowel will commonly contact a lot 
of different consonants, whereas a consonant will tend to contact the smaller 
number of vowels. By studying which letters contact each other and how many 
different contacts each letter has, we can sort ciphertext letters into vowels and 
consonants fairly reliably. 


(3) To make use of these vowel-consonant relationships, we use a special kind of fre- 
quency count which charts contacts as well as frequencies. 
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Frequency: 8 
Contacts: 7 


b. Trilateral Frequency Count. The trilateral frequency count is used to record, for 


each letter in a cryptogram, the letter that precedes it and the letter that follows it. 
Figure 4-4 shows a cryptogram and its trilateral frequency count. The pairs of letters 
appearing in the column below each letter of the alphabet are the preceding and 
following letters for each occurrence. For example, the YG that appears below the 
letter A shows that the first A in the cryptogram occurred as part of the segment 
YAG. Refer to the cryptogram itself, and you will see that the segment YAG occurs 
in the second group of the message. Two numbers appear above each letter of the 
alphabet. The top figure is the frequency of that letter, which is the same as the 
number of pairs of letters in the column below it. The second number is the number 
of different letters the basic letter contacts. This type of frequency distribution and 
its supporting contact information take some time to prepare by hand, but they can 
lead to the solution when other methods fail. 


LBWYR YAGGB GIOYF 


GKBSK TEEAT HBUYA 


VIVBA ATUDR TEECY DTUIG XYV 
TWYKN UQVYQ FQFVY FIVIG BYPST 
VYART EEAGB FIGXY VBSBN VST 
uTUY*X 
prabcdefghijkimnopqrstuvwxryz 


1266 9 1 5 1 3 1 - 2 £ § &€ 3 513 912 5 3 16 - 
24 4 6 8 25 1 6 I =- & 2 2 4 4 5 12 98h 3 212 | 
Cc DEF GH IJK L MN OP QO R S$ TU VW xyz 


LW EY UR TE YB AG TB GO VV GB -B KU IY VS FV YY BK AG BU BG BY GY WR 
GG YT FAUQGB UG ST BV UV DT BT GB UB OT YY GY RA 
TE QQ BI FV YN YF AT PT KE BY YJ TY Y- OF 

Tu EC QV IT = VG FF BB AH YF JB TY ~~ UA 
TE YI VK FG VT VW TD YBTY AW 

EA BI IX AU TI QY Ww 

HU IB RE NQ FY Ww 
VA AB DU YT II fon) 
1X SW TY BP xv 

SV TY WK 

RE YB vQ 

sw ONS VF 

uu VA 

xv 

wu 

UX 


Figure 4-4. Triliteral frequency distribution. 


(1) The contact information is used to determine which ciphertext letters are 


vowels and which are consonants. More often than not, the highest frequency 
plaintext letter is a vowel, even when E is not the highest frequency letter. An 
even more reliable indicator is the number of contacts. The letter that contacts 
the most different letters will usually be a vowel. In the example i 
ciphertext Y is likely to be a vowel for both reasons. The letters that Y contacts 
most frequently are likely to be consonants. 


In cases where there are several letters all about the same frequency and no 
letter stands out as a likely vowel, we can begin our approach through likely 
consonants instead. All or most of the lowest frequency letters should be conso- 
nants. The letters they contact most frequently are likely to be vowels. 


(3) We can use either a likely vowel or the set of likely low ey consonants as 


— 


nS 


our starting point. Whichever we start with, we will use both as the problem 
develops. The object is to separate the consonants and vowels by plotting the 
contacts of each in separate vowel and consonant line charts. 


For our example, we will pick the low frequency consonants as the starting 
point. The process begins by charting the contacts of the lowest frequency 
letters. We will begin with the letters that only occurred once i Figure bc 
H, J, L, O, and P. Draw a horizontal line two to three inches long and write the 
selected letters above it. Draw a vertical line several inches from the center of 
the horizontal line producing a T-shaped figure. This is the consonant line. The 
contacts are charted on the line with the first letters of each pair to the left and 


the second to the ca Each new contact letter is charted on a new row. With 
the contacts for C, H, J, L, O, and P charted, the consonant line appears below. 


CHIJLOP 


Continue adding the lowest frequency letters one frequency group at a time. We 
first placed those with a frequency of one. Next add those with a frequency of 
two. Continue with those with a frequency of three and so on. Stop when the 
next frequency would represent more than 20 percent of the total. Going any 
further raises the chance too high of including a vowel that would bias the chart. 
If a vowel occurs only once or twice and is included, its influence will be small. If 
it occurs five or six times and we include it, it could lead to wrong follow-on 
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decisions on vowels and consonants. In our example, there are 130 letters. We 
want to keep our sample below 20 percent, or not more than 26 letters 
altogether. On this basis, we can add the frequencies of 2, 3, and 4, but not 5. 


(6) The consonant line now shows that the low frequency consonants contact the 
ciphertext letter Y more than any other letter. The teeta is very high that 
this is a vowel. It is tempting to select the letter V as a vowel, but it is better to 
proceed one letter at a time at this point. 


(7) Using the letter Y and its contacts, we next begin construction of a vowel line. It 
is charted exactly the same as the consonant line chart. The vowel line 
including just the letter Y’s contacts is shown below. 


Y 


ay "= 


2 
8 ASG o>w 


OAXT 


< 
< 
< 


(8) The vowel line shows us we were correct in not initially accepting the letter V as 
a vowel. It contacts the low frequency consonants quite readily, but it also con- 
tacts a vowel readily. It may be a consonant such as R, L, or N which easily 


combines with other consonants. We will not try to place V in either line at this 
point. 


(9) The letter W contacts Y six times and is a likely consonant. We will continue by 
going back to the consonant line and adding W. 


Ww 
CHIJILOPDNKRXG Y 
Wow | W 
RIR 
A|AAA 
fe) 
FF 
UU | UU 
VVV | VVV 
Cc 
D 
XX 1X 
K 
Q 


(10) The letter T now appears as a strong candidate for a vowel. It is second only to 
Y in consonant contacts so far, and just as importantly, it does not contact the 
already selected vowel at all. We add T and its contacts to the vowel line. 


Ww 
CHILOPDNKRXG 


D 
X 
K 
Q 


xmmaan 
mm 
m 


SSS 
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(11) The vowel line shows A and U as likely consonants. Adding these letters to the 
consonant line produces the next diagram. 


AU W 
CHILOPDNKRXG 


{1 
Sjs 
UUU | UU Cc 
RR D|D 
K Xx |X 
GGG |GG K |K 
N|N Q 
D|D G|c 
AAIA B 
FF |FFF EEE 
Q H 
SSS 


(12) B appears to be a vowel. This is reinforced by the letters BUUB in the first line 
of the text. If U was correctly selected as a consonant, B is probably a vowel on 
the basis of this letter pattern. It is a good idea at this point to return to the 
text and underline all the recovered vowels. 


LBWYR YAGGB GIOYF BAT T BUUBYV 
GKBSK TEEAT HBUYA Ywy F QVTWY 
VIVBA ATUDR TEECY DTUIG XYVBS 
TWYKN UQV YQ FQFVY FIVIG BVPST 
VYART EEAGB FIGXY VBS B VSTWY 
UTUYxX 
peabcdefghijkimnopqrstuvwxy 
c: 
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A UW 
CHILOPDNKRXG 


(13) Examination of the vowel-consonant patterns in the text confirms additional 
consonants. Double letters preceding or following the vowel are very unlikely to 
be vowels. We can then assign anherted E and Gas consonants. The GGBG 
segment on the first line coal not all be vowels. EE occurs three times in the 
text following a vowel. 


(14) V appears to be a consonant from the number of contacts in the vowel line, and 
its appearance between vowels in the segments YVB and TVY confirm it as a 
consonant. Placing G, E, and V in the consonant line produces this diagram. 


AUWGEV 
CHILOPDNKRXQ 


EEEEEE |EEE 
YYYYYYYYYYYYYY | YYYYYYYYYYYYYYYY 
TITTTTTTTITTT | TTTTTTTTTT 
BBBBBBBBB | BBBBBBBBBB 
VVVV 
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(15) The letters F, I, and S remain unidentified. At least one of these is likely to be a 
vowel, since four of the letters are expected to be vowels and we have only iden- 
tified three so far. Comparing the appearance of F, I, and 5 in the vowel and 
consonant lines, we see that the letter I is the best candidate for a vowel. The 
letter I does not appear on the vowel line at all, whereas, F and S directly con- 
tact a number of the recovered vowels. We now underline I in the text and add 
it to the vowel line. 


LBWYR YAGGB G10 YF BATGT BUU BV 
GKBSK TEEAT HBUYA YWYUF QVTWY 
VIVBA ATUDR TEECY DTU 1G XYVBS 
TWYKN UQVYQ FQFVY FIVIG BVPST 
VYART EEAGB FIGXY VBSBN VSTWY 
UTUYxX 

P? abcdefghijkimnopgqrstuvwxyz 
c: 

AUWGEV 
CHIJILOPDNKRXQ 


EEEEEFE jEEE 
YYYYYYYYYYYYYY | YYYYYYYYYYYYYYYY 
TITTTTTTTTTT |TTTTTTTTTT 
BBBBBBBBB |BBBBBBBBBB 
VVVV 
IT! 
$5 


ER RE 


1 


ROOT 


(16) There are a number of directions you can take at this point. No single example 
can demonstrate them all. Some of the approaches that can be tried are— 


e Toanalyze vowel combinations to determine individual vowels. 
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e To search for the plaintext consonants N and H. These two letters have 
typical patterns of contact with consonants and vowels. N tends to follow 
vowels and precede consonants. H tends to follow consonants and precede 
vowels. In some cryptograms these features will be very evident in the vowel 
and consonant line diagrams. In others, they will not stand out at all. 


e To recover double letters by frequency analysis. Plaintext LL is the most fre- 
quent double consonant. EE and OO are the most frequent double vowels. 


e Torecover common word endings such as -ING and -TION, which often 
appear as repeats even when complete words do not repeat. 


(17) We will use several of these approaches to complete the solution of the sample 
problem. First, one vowel combination appears in the cryptogram, the cipher- 
text TB as part of the segment TGTBU. Referring to the two-letter frequency 


data in| Appendix A, page A-2| the most frequent vowel combinations are EE, 
IO, OU, and EA. TB 1s not EE, because it is not a double letter. It is likely to 


be one of the other three. IO is particularly significant, because it is usuall 
part of a -TION combination when it appears. The letters G and U, ch 
precede and follow BT in the text, are high frequency consonants and support 
the -TION possibility. The letter T occurs again before G, which would 
produce -ITION, a very good letter combination. 


(18) If TGTBU is -ITION, the letter U may appear with the typical pattern of 
plaintext N. Examining the occurrence of U in the vowel and consonant lines, 
we see that U follows vowels more often than it precedes them. It also precedes 
consonants more often than it follows. The differences are slight, but they help 
to confirm the initial assumption. 


(19) Ciphertext EE occurs three times. This is likely to be plaintext LL. Each time 
it is preceded by ciphertext T, which we have tentatively identified as the 
plaintext I. ILL is another good combination that appears as part of many 
common words such as HILL and WILL. 


(20) Y is the most common letter, and it is a vowel. While we would not usually 
begin analysis by assuming the most common vowel is E, our tentative iden- 
tification of I and O make this much more likely. If Yc is Ep, then the remain- 
ing high frequency vowel, Ic, is probably Ap. 


(21) Placing all the tentative recoveries in the cryptogram produces the next 
example. 
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co < 


ao v 


io 

a 

I< 

y*) 
Ia |< 
Tm — 


qs 
< 
Ino 
> 
> 
i te 


He 


tT — 


a 
[<a 
A 

- 2 
cs 
re) 
< 


tT ~— 
mm 


Ow |l<o 


Iwo 


- | Bo 


T 


[=o 


On 


I<o 
be 


[oo 


jk lmnop 


E 


UB 


™ [as 


Ow 


t 
G 


{Bo 
cs 


< 
|<o 


loo 
< 


cs 


ta ~- 


uvwxy z 


(22) With the assumed letters filled in, two numbers stand out. ONE appears in the 
second line, and NINE appears in the last line. Since numbers tend to occur 
with each other, our next objective is to try to place additional numbers adja- 
cent to these two. If we try SEVEN after ONE because of the -E-EN pattern, it 
leads to the recovery of SIX before ONE and FIVE before NINE. 


(23) All of the high frequency plaintext letters except R are now recovered. Vc is the 
obvious candidate for Rp due to its high frequency and appearance in the text. 


(24) Placing plaintext S, V, X, F, and R reveals this text. 


cs 


a 


s 
R A 


um |l<oa 
|< 


! 
K E 


a< a 
I~o <5 
A two 
Zz Pu 
Co Sw tete 
0 ie es 


|< 
ru 
v2) 
14 
1 — 
me 


o 
loa 
fe) 
a. 
0 


t 
G 


ti — 


cs 


t 
G 


Pu 
ies Katd 


Ino 


> 


t 
G 


x 


[ae 


|= 
oO 


Mm | oo 
m — 


|< 
be 9 | 


I<oa 
Pu 


|@o 


|<a 


au 


Gz I<oa IAe 


<4 
| — & 


< 


cs One 
be | 


Imo [—m 


ra 
a) 


las 


Ow 


Ae 


iwo x re) Ino 
<1 |<a <4 cas 


<a 
Neen 
|= 


An |Bo A< IDo 
l4- Ue i<o 


a< 
|l<o 


<n 


uvwxrxyz 


W 


H 


(25) Many possibilities for plaintext appear now. ZERO, POSITION, RIVER 
CROSSING, PREPARATORY, and FOUR can all be seen upon close 


examination. 


v 
Ww 


r3 
Azy ivo 


Iwo 
Am I< 


< Nea 
an 
<a 


Ite 
a< 
I<o 
A> tuo 


< 

|< 
Pu 
we 

IaH 


X 


cs 
lo 

cs 
|< 


abcde 


a 
ee ve 


(26) Analysis of the cipher sequence shows it to be a simply transposed keyword 


Pu 


mm — 


Oa tae 


f 


On 


les mod 


<4 


g 


1CJQYSD 


t t k p 

GB GIOYF B 
sixones e 
AT HBUYA Y 
gw il lbe g 
DR TEECY D 
ed pdpre p 
YQ FOQORrVY-F 
t patzeior 
GB FIGXY V 


hijkIimnoop 
KT?7O0OELUBF 


i< Pu 
I<o |a- 
es 


[-~- 
cs 
[= 


[— 
<n 
[=o 


qrs 
2? VA 


[ae 
ca 
. (om) 
|oo 
<5 


Ae Owe We 
o XN OQ IDO 

I< o <n 

< late 

lwo a< 

New l~<~o 


Io 


<4 
UX 
Mi mn 
lH 


Zc 
<4 
Nom 
[a= 
a< 
I<o 


tuvwxrxy z 
GNWRHPX 


mixed sequence, which identifies Jp as Zc and Qp as Mc. 
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CHAPTER 5 


MONOALPHABETIC MULTILITERAL 
SUBSTITUTION SYSTEMS 


Section I 


Characteristics and Types 


5-1. Characteristics of Multilateral Systems 
As explained i monoalphabetic unilateral systems are those in which the 


ciphertext unit 1s always one character long. Multilateral systems are those in which 
the ciphertext unit is more than one character in length. The ciphertext characters 
may be letters, numbers, or special characters. 


a. Security of Multilateral Systems. - using more than one character of ciphertext 
for each character of plaintext, encipherment is no longer limited to the same num- 
ber of different cipher units as there are plaintext units. Although there is still only 
one alphabet used in multilateral systems, the alphabet can have more than one 
ciphertext value for each plaintext value. These variant ciphertext values provide 
increased security. Additionally, the plaintext component of a eee can be 
expanded easily to include numbers, punctuation, and common syllables as well as 
the basic 26 letters. When used, the variation in i eat and the reduced 

| 


spelling of numbers, punctuation, and common syllables minimize the exact 
weaknesses that we used i Chapter dfo break into unilateral systems. 

b. Advantages and Disadvantages. The increased security possible with variant 
multilateral systems is the major advantage. The major disadvantage is that by 
substituting more than one character of ciphertext for each plaintext value, the 
length of messages and resulting transmission times are increased. A second disad- 
vantage is that more training and discipline are required to take advantage of the 


increased security. If training and discipline are inadequate, the security advan- 
tages are lost easily. 


5-2. Types of Multilateral Systems 


Multiliteral systems are further categorized by the type of substitution used. The 
major types are— 


e Biliteral systems, which replace each plaintext value with two letters of ciphertext. 


e Dinomic systems, which replace each plaintext value with two numbers of cipher- 
text. 


e Trilateral and trinomic systems, which replace each plaintext value with three 
letters or numbers of ciphertext. 


e Monome-dinome systems, which replace plaintext values with one number for some 
values and two numbers for other values. 


e Biliteral with variants and dinomic with variants systems, which provide more than 
one ciphertext value for each plaintext value. 


e Syllabary squares, which may be biliteral or dinomic, and which include syllables as 
well as single characters as plaintext values. 


5-3. Cryptography of Multilateral Systems 


The cryptography of each os of multilateral system, including some of the odd varia- 
tions is illustrated in the following aaa Most of these systems are coordinate 
matrix systems in which the plaintext values are found inside a rectangular matrix and 
the ciphertext values consist of the row and column coordinates of the matrix. 


a. Simple Biliterals and Dinomics. The simplest multilateral systems use no varia- 
tion. They typically use a small rectangular matrix large enough to contain the 
letters of the alphabet and any other characters the system designer wants to use as 
plaintext values. 


(1) The plaintext values are the internals of the matrix. They may be entered 
alphabetically, follow a systematic sequence, or they may be random. They 
may be entered in rows, in columns, or by any other route. 


(2) The row and column coordinates are the externals. Conventionally, the row 
coordinates are placed at the left outside the matrix, and the column coor- 
dinates are placed at the top. As with the internals, the coordinates may be 
selected randomly or produced systematically. 


(3) A ciphertext value is created by finding the plaintext value inside the matrix 
and then combining the coordinate of the row with the coordinate of the column 
for that plaintext value. Either can be placed first, although placing the row 
coordinate before the column coordinate is more common. 
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(4) Five by five is a common size for a simple system (Figure 5-1). The 26 letters are 
fitted into the 25 positions in the matrix by combining two letters. The usual 
combinations are | and J or U and V. It is up to the deciphering cryptographer to 
determine which of the two is the correct value. There are few, if any, words in 
common usage in which good words can be formed using either letter of the I/J 
or U/V combinations. Other common sizes are 6 by 6 (which gives room for the 
10 digits), 4 by 7, and 3 by 10. Many other sizes are possible. 


ASA ERORE 


: at taeock 
: 3892 9238 6168 9600 


p: 24 ta nk s p: at tae ck 
c: ENER IOVO TATE OOXX c: 4187 7814 3963 


Figure 5-1. Biliteral and dinomic matrices. 


(5) Example A in Figure 5-1 is a simple 5 by 5 matrix with I and J in the same plain- 
text cell of the square. The coordinates and the sequence within are in 
alphabetic order. 
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(6) Example B is a simple 3 by 10 matrix with orderly coordinates and a keyword 
mixed sequence inscribed within. The four extra cells are used for punctuation 
marks. 


(7) Example C is a 6 by 6 matrix with a spiral alphabetic sequence followed in the 
spiral with the 10 digits. The coordinates in this case are related words. 


(8) Example D is a 5 by 5 matrix with numeric coordinates. The plaintext sequence 
is keyword mixed entered diagonally. In this case, there is deliberately no 
repetition between the row and column coordinates. This allows the coordinates 
to be read either in row-column order or in column-row order without any 
ambiguity, as in the sample enciphered text. This is unusual, but you should be 
alert to such possibilities. 


b. Triliterals and Trinomics. Trilateral and trinomic systems are essentially the 


ps 
ce 


same as biliteral and dinomic systems. The difference is that either the row coor- 
dinates or the column coordinates consist of two characters instead of one, creating 
a three-for-one substitution. Such systems offer no real advantage except to provide 
a slightly different challenge to the cryptanalyst, and have the distinct disadvan- 
tage of tripling the length of messages. They are easily recognized, and offer no 
increase in security. 


b |e] 
39fola}ely{ x] z] | {7} /] 


j u 1 i e t p: a t t a c k 
DMW EOY ANX DMW ELV DOY c: 138 392 392 138 261 268 


c. Monome-Dinomes. Monome-dinomes are coordinate matrix systems constructed 


so that one row has no coordinate. The values from that row are enciphered with the 
column coordinate only. This means that some ciphertext values are two characters 
in length (dinomes) and others are only one (monomes). If the values used as row 
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coordinates are also used as column coordinates, no plaintext values are placed in 
the monome row under those repeated column coordinates. The blanking of cells in 
the monome row is shown in the example below. 


12345678490 


ps e nem y a t t ack ii on g 
c: 2 57 2 0 67 4 6363 & 8 569 57 54 


Resulting message: 


25720 67463 63485 69575 40000 


(1) If the cells corresponding to the row coordinates in the monome row are not 
blanked, the deciphering cryptographer will have difficulty. Decipherment 
proceeds left to right, and when a 9 or a 6 is encountered in the matrix shown, it 
will always be a row coordinate or combine with a preceding row coordinate. It 
will never stand alone as a monome. If the 5 and 6 cells were not blanked, the 
ta: cryptographer could not tell if a 5 or 6 were a monome or the begin- 
ning of a dinome. The cryptographer would have to rely on context to figure out 
which was intended, and that could lead to errors. 


(2) The additional examples of monome-dinomes shown below demonstrate the 


various ways they can be constructed. The last example (top of page 5-5) is a 


1234567890 


ps req u e st he 1 p 
c: 3 13 231 233 13 0 232 7 13 18 9 


Resulting message: 


31323 12331 3023271318 90000 


d. Variant Systems. Variants in a multiliteral system allow plaintext characters to 
be enciphered in more than one way. Variants can be external or internal. 


(1) External variant systems have a choice of coordinates. Either row coordinates 


or column coordinates or both can have variants. Examples A and B in 
Figure 5-2 provide two ways to encipher every letter. 


0123456789 


p: a t tia k 
c: AV DO DY AL CV EM 


Pp: 
c: BQGT HTAL EQKM : 6023 7710 5340 7176 3300 


Figure 5-2. External variant systems. 
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Example C provides four ways to encipher every letter. Example D was con- 
structed to provide the most variants for the most common letters. The letters 
E, T, and O can all be enciphered in eight different ways. R, N, and I can be en- 
ciphered in six different ways. A, 5, D, L, U, H, and M can be enciphered in 
four different ways. Q, X, Z, and the comma can only be enciphered one way. 
When any of the systems are conscientiously used, repeated words in the text 
will not produce repeated ciphertext segments. 


Internal variant systems use larger matrices to provide variants inside the 
matrix. Each common plaintext letter appears more than once. Here are two 
examples of internal variant systems. 


The first example above places the letters in the matrix according to their 
expected frequency in plaintext. If their use is well balanced, all letters in the 
square will be used with about the same frequency. The second square achieves 
the same effect by using 10 words or phrases in the rows, which use all the 
letters. The first letters of the column spell out an eleventh word—logarithms. 


e. Syllabary Squares. Another type of internal variant system is the syllabary 
square. This type includes common syllables as well as single letters. When these 
are used, the same square may be used for a period, changing the coordinates more 
frequently than the square itself. 


vA oOo 


p: r ein for cem ent 5s 
c: 94 31 56 71 94 44 09 35 13 92 


p: re in f or cem ent s 
c: 98 28 74 59 44 09 39 92 


The two sample encipherments of REINFORCEMENTS show that a syllabary 
square suppresses repeats in ciphertext just as single letter variant systems do. It 
also has the advantage of producing shorter text than single letter multilateral 
systems. 


f. Sum Checks. It is very easy for errors to occur when messages are transmitted and 
received, whatever means of transmission are used. Because of this, some users 
introduce an error detection feature into traffic known as sum checking. 


(1) In its simplest form, a sum-check ie is added to every pair of digits in numeric 
messages. The digit is produced by adding the pair of digits to produce the 
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third. If the result is larger than 9, only the second digit is used, dropping the 
10’s digit, for example 8 plus 9 equals 7 instead of 17. This is also known as 
modulo 10 arithmetic. 


Ciphertext! 42 63 55 47 22 89 
Ciphertext with sum check: 426 639 550 471 224 897 


(2) Whenever the first two digits do not add up to the third, the receiving cryp- 
tographer is alerted that an error has occurred. The ey eee then tries to 
figure out the correct digit from context or by assuming that two of the digits are 
correct and determining what the third should be. 


(3) There are many variations on the simple system of sum checking described 
here. Sometimes the sum-check digit will be placed first or second in each 
resulting group of three. Sometimes a sum check will be applied to a larger 
group than two numbers. Sometimes a different rule of arithmetic will be used, 
such as adding the sum-check digit so that the see three always add to the 
same total. Sometimes a more complex system will be used that provides 
enough information to resolve many errors as well as detect them, particularly 
when computers are used in data and text transmissions. 


(4) Computer produced sum checks can be used with any characters, not just num- 
bers. Computer produced sum checks will normally be invisible to the user, as 
they are automatically stripped out when a message is received. They may or 
may not be invisible to the cryptanalyst. Recovery of computer produced sum 
checks is well beyond the scope of this text, but you should be alert to their 
existence. 


Section II 


Analysis of Simple Multilateral Systems 


5-4. Techniques of Analysis 


The first steps in solving any multilateral system are to identify the system and 
establish the coordinates. It makes little difference whether the system uses numbers 
or letters for coordinates. The techniques are the same in either case. Once the system 
is identified and the coordinates set up, a solution of the simpler systems is the same as 
with unilateral systems. Variant systems require additional steps. Each type is con- 
sidered in the following paragraphs. 


5-5. Identification of Simple Biliteral and Dinomic 
Systems 


Simple biliteral and dinomic systems are very easy to recognize and solve. 


a. First, the two-for-one nature of the system will usually be apparent. The message 
will be even in length. The majority of repeated segments will be even in length, 
although when an adjacent row or column coordinate is the same, a repeat may 
appear odd in length. The distance between repeats, counted from the first letter of 
one to the first letter of the next, will be even in length. 


b. Second, unless the identical letters or numbers are used for row and column coor- 
dinates, there will be limitation by position. One set will appear in the row coor- 
dinate position, and the other set will appear in the column coordinate position. 
Even in the case where all coordinates are different and either the row or column 
coordinate character may be placed first, each pair will be limited to one from one 
set and one from the other. If you do not recognize it right away, charting contacts 
will make it obvious. 


c. For systems with letters as coordinates, not more than half the alphabet will be used 
as coordinates. This severe limitation in letters used is the most obvious charac- 
teristic, since only very short unilateral messages are ever that limited. A phi index 
of coincidence will reflect that limitation, always appearing much higher than 
expected for a unilateral system. 


d. Dinomic systems, since they are limited to the 10 digits anyway, are not quite as 
obvious. Simple systems should still show positional limitation, however. 


5-6. Sample Solution of a Dinomic System 


The next problem shows the steps in solution of a sample dinomic system. These steps 
apply equally to biliteral systems. 


2023 2029 6224 6322 2144 4420 6362 4924 6529 2769 
2043 2123 2227 4627 6521 2221 2723 6527 2349 2144 
4481 8287 2423 4349 2144 4485 8089 6522 2746 2421 
6365 2263 2142 2027 2324 6322 2144 4420 6362 4627 
6521 2221 2723 6560 2144 4441 2047 2123 2422 6680 


6666 6522 2746 4263 2069 2122 6425 2729 2924 2343 
2123 4700 
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a. The most obvious thing about this pean is that every pair of numbers begins 
with 2, 4, 6, or 8. The final pair begins with 0, but since it appears nowhere else, it is 
probably a filler. This suggests that we are dealing with a matrix with four rows. 


b. Scanning the second digit of every pair, we see that there is some limitation in the 
column position, also. All digits are used except 8. The matrix appears to have nine 
columns, although it is possible that a column for 8 exists, but no values from it 
were used. Four by nine is a reasonable size for a matrix. 


c. Next, we check for repeats and underline them. We also prepare a dinomic 
frequency count by setting up a 4 by 9 matrix and checking off each dinome that 
appears. 


2023 2029 6224 6322 2144 4420 6362 4924 6529 2769 
2043 2123 2227 4627 6521 2221 2723 6527 2349 2144 
4481 8287 2423 4349 2144 4485 8089 6522 2746 2421 
6365 2263 2142 2027 2324 6322 2144 4420 6362 4627 
6521 2221 2723 6560 2144 4441 2047 2123 2422 6680 


6666 6522 2746 4263 2069 2122 6425 2729 2924 2343 
2123 4700 


d. The two longer repeats both include patterns of repeated values. Word patterns can 
be constructed on repeated dinomes just as they were for repeated single letters. 
The word patterns for the two longer repeats are shown below. 
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e. The word pattern lists i show only one possibility for each pattern as 


shown. The two are consistent with each other. Using these recoveries, we can set up 
a matrix and place the values in it and the cryptogram. 


2123 


i a 
2746 4263 2069 2122 6425 2729 2924 2343 


f. The plaintext words ENEMY and AIRSTRIKE are now obvious. Placing the M 
from ENEMY shows COMMANDING at the end of the message. Most of the 
remaining plaintext letters are easily recovered. 
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en em ya rt il le ry ha sm ov 
2023 2029 6224 6322 2144 4420 6362 4924 6529 2769 


ed in to po si tioon so nh i} 
2043 2123 2227 4627 6521 2221 2723 6527 2349 2144 


| an dh il 1 st op ai 
4481 8287 2423 4349 2144 4485 8089 6522 2746 2421 


rs tr ik eo na rt itl tle ry po 
6365 2263 2142 2027 2324 6322 2144 4420 6362 4627 


siti oon sw iil [fb eg in at 
6521 2221 2723 6560 2144 4441 2047 2123 2422 6680 


6666 6522 2746 4263 2069 2122 6425 2729 2924 2343 


123456790 


g. The letters in the second row precede all the letters in the third row aaa 
This suggests an alphabetic structure, although the columns are clearly not in the 
correct order. The first row probably contains a keyword. If we rearrange the 
columns so the letters in the second and third rows fall in alphabetical order, we see 
the next structure. 


h. The plaintext letters area keyword mixed sequence based on INCOME TAX. After 
placing the remaining letters, there are still 10 blank cells in the matrix. Seven of 
them are used in the cryptogram, and they cluster together in segments of three or 
four dinomes. They show the typical pattern of numbers. In particular, the four 


plaintext values of groups 50 and 51 of the message indicate time, and 66 is 
probably a 0. More likely than not, the remaining numbers fill the bottom row of 
the matrix in numerical order, but these recoveries cannot be confirmed without 
more information. If hill numbers could be compared to known numbers from an 
enemy map sheet, we could accept the values with more confidence. At this point, 
we are reasonably confident of the letter arrangement and the number 0, but the 
remaining numbers are only a possibility. However, if this were a current real life 
situation and the enemy referred to by the text is our own forces, we would certainly 
consider reporting the likelihood of air strikes on our artillery positions. 


5-7. Analysis of Monome-Dinome Systems 


The characteristics of biliteral and dinomic systems that stand out most are the 
divisibility by two and the ae limitation that makes it easy to determine matrix 
coordinates. By changing the length of the plaintext unit from character to character, 
monome-dinome systems avoid both of these characteristics. In their place, however, 
the frequency of the numbers (or occasionally, letters) used as row coordinates tends to 
be aaa than the other coordinates. Choosing the highest frequency numbers as row 
coordinates gives a starting point to reconstruct a monome-dinome system. Consider 
the next example. 


80796 78009 60720 513187 33812 
07960 76059 69730 71070 99089 
60905 96070 62050 09109 13866 
96058 24710 81059 69740 79610 
9059 19787 16833 07389 70805 
00019 60509 07055 05458 57950 
19196 97407 96960 72051 18733 
$1207 06910 70390 56545 35399 
952045 00030 08204 


Numbers: | 23 45 6 7 8 9 0 
Frequency: 19 8 13 6 22 20 25 16 33 53 


a. Repeats are underlined and the number frequencies are shown in the example. A 
dinomic system can be ruled out, because the repeats are an odd interval apart. The 
distance between the repeats is 153 characters, counting from the first character of 
one to the first character of the next. A three-for-one substitution is possible from 
the position of the repeats, but no patterns or positional limitations appear when 
divided into threes. The very high frequency of the numbers 0 and 9 in relation to 


the other numbers suggests that the system is monome-dinome. The most likely 
row coordinates are (0) and 9. Other row coordinates are possible, but at this point it 
is best to start with the most likely candidates only. 


b. Begin by breaking the ine into monomes and dinomes using only the 0 and 9 as 
row coordinates. Mark off the divisions in pencil, keeping in mind that some 
changes | be required later. Start with the first character of the message and 
work through in order to the end, marking off the monomes and dinomes. Whenever 
the first character after a division is a 0 or 9, include it with the next character. If it 
is any other character, leave it as a monome. 


s/o 7/9 6/ 7/8/0 0/9 ~=— 6/0 7/2/00 ~—5/1/1/8/7/ —3/3/8/1/2/ 
07/9 6/0 §=7/6/0 5/9 = 6/9. 7/3/0 += 7/1/0 7/0 ~— 9/9 O/8/9 
6/0 9/0 5/ 9 6/0 7/0 6/2/0 5/0 = o/9. : 1/0 9/ _~—:1/3/8/6/6/ 
9 6/0 5/8/_  2/4/7/1/0 = 8/1/0 5/9 = «6/9 7/4/0=— 7/9 6/1/0 
9/0 5/9 1/ 1/9 7/8/7/ = 1/6/8/3/3/_ 0 7/3/8/9 = 7/0 8/0 5/ 
00/0 1/9 6/0 5/0 9/ 07/0 5/5/ 0 5/4/5/8/ 5/7/9 5/0 
1/9 1/9 6/ «69 7/4/0 7/9 6/9 6/0 = -7/2/0 5S/1/ —1/8/7/3/3/ 
8/1/2/0 7/ 0 6/9 1/0 =7/0 3/9 Of §=5/6/5/4/5/ —3/5/3/9 9/ 
9 5/2/0 5/ 0 0/0 3/0 0/8/2/0 & 


c. With the divisions in place, we can try a word pattern on the long repeat. 


d. We next set up a monome-dinome matrix with row coordinates 0) and 9 and include 
the recovered letters. Shown below is the partially recovered matrix and the crypto- 
gram with all letters from RECONNAISSANCE placed in the plaintext and the 
matrix. 
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aeior ia r ec oo nnai ssanc 
8/0 7/9 6/ + 7/8/0 0/9 6/0 7/2/0 5/1/1/8/7/ = 3/3/8/1/2/ 


e or e ° r s e ne ar 

07/9 6/0 7/6/0 5/9 §=©6/9 7/3/0 += 7/110 7/0 ~=—s 9/9 O/8/9 
° roe co nsa 

6/0 9/0 5/ 96/0 7/0 6/2/0 5/0 0/9 1/0 9/ 1/3/8/6/6/ 

r o aociin no r e ron 

9 6/0 5/8/ = 2/4/7/1/0 8/1/0 5/9 6/9 7/4/0 7/9 6/1/0 

° n ai noass e sa ° 
9/0 5/9 1/ 1/9 7/8/7/ = :1/6/8/3/3/_ 0 -7/3/8/9 7/0 8/0 5/ 
ig ° e o ° a i 

0 O/o 1/9 6/0 5/0 9/ 07/0 5/5/ 0 5/4/5/8/ 5/7/9 5/0 
cr e r r e ¢con naiss 

1/9 1/9 6/ 369: 7/4/0 7/ «39 6/9 6/0 = 7/2/0 5/1) = 1/8/7/3/3/ 

ance e s s 

8/1/2/0 7/ 0 6/9 1/0 §=7/0 3/9 Of §=5/6/5/4/5/ —3/5/3/9 91 


c oO ac 
9 5/2/0 5/ © 0/0 3/0 0/8/2/0 4 


e. These recoveries suggest additional plaintext, particularly the message beginning 
AERIAL RECONNAISSANCE REPORTS ENEMY. Placing these new values 
leads to additional recoveries. 
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aeeor ia 1} eco nnai ssanc 
8/0 7/9 6/ 7/8/0 0/9 6/0 7/2/0 S/I/N/8/7/ = 3/3/8/1/2/ 
e or po tse neom yar 
0 7/9 6/0 7/6/0 5/9 6/9 7/3/0 7/1/0 7/0 9/9 0/8/9 
m o roe co | um nsapp 
6/0 9/0 5/ 9 6/0 7/0 6/2/0 5/0 0/9 1/0 9/ = 1/3/8/6/6/ 
r o a chin noir t he ro onm 
9 6/0 5/8/ = 2/4/7/1/0 8/1/0 5/9 6/9 7/4&/0 7/9 6/1/0 
o uU nt aio npass e sa t g 0 
9/0 5/9 1/ 1/9 7/8/7/ ~—1/6/8/3/3/ 0 7/3/8/9 7/0 8/0 5/ 
1 f r o m e o ° a i f 
0 0/0 1/9 6/0 5/0 9/ 0 7/0 5/5/ 0 5/4/5/8/ 5/7/19 5/0 
uso t he r re con onaiss 
1/9 1/9 6/ 9 7/4/0 7/ 9 6/9 6/0 7/2/0 SAL 1/8/7/3/3/ 
ance d eu b sy s § 
8/1/2/0 7/ 0 6/9 1/0 7/0 3/9 Of §=65/6/5/4/5/ = 3/5/3/9 9/ 
c oO | b | ac k 
9 5/2/06 5/ 0 0/0 3/0 0/8/2/0 4 


f. Several things remain to be done to complete the solution. The columns can be 
rearranged to recover a keyword in the top row and alphabetical progression in the 
next two rows. Additionally, there are two unrecovered segments of text. Both of 
them include a number of 5s, and the preceding text in each case suggests numbers. 
The solution is that there is another row in the matrix with the 5 as its coordinate. It 
was not used enough to select from frequency alone, but once enough text was 
recovered, the structure can be seen. The added row includes the numbers. The 
complete solution appears in the next example, with the recovery of specific num- 
bers only tentative. 


aeor ia ! r ec 
8/0 7/9 6/ 7/8/0 0/9 6/0 7/2/0 
e cr e po r t s 
0 7/9 6/0 = 7/6/0 5/9 ~— 6/9: 7/3/0 
m o r e d co 
6/0 9/0 5/ 96/0 7/0 6/2/0 5/0 


r oa chin g no 
9 6/0 5/8/ -2/4/7/1/0 ~— 8/1/0 5/9 


°o 


e 


nnai 


5/1/1/8/7/ 


nee m 
7/\/0 7/0 


! u m 
0/9 1/0 9/ 


c 


t he 
6/9 7/4/0 


o ou nt ai npass e sa t 
9/0 5/9 1/ 1/9 7/8/7/ = 1/6/8/3/3/ 0 7/3/8/9 


1 f r o m eo 
0 0/0 1/9 6/0 5/0 9/ 0 7/0 5/5 


uo t he r r 
1/9 1/9 6/ 9 7/4/0 7/ 9 6/9 6/0 


ance d ueoe b y 1 6 
8/1/2/0 7/ 0 6/9 1/0 7/0 3/9 Of = 65 6/5 4/5 


- ¢ Oo ] b ! ac k 
9 5/2/0 5/ 00/0 3/0 0/8/2/0 4 


5-8. Application of Vowel-Consonant Relationships 


to Multiliterals 


Vowel-consonant relationship solutions can be applied to multiliterals, too. As long as 
you can determine the coordinates of the matrix, you can set up a dummy matrix with 
any sequence of characters inside as a pseudoplain component. You then reduce the 
cryptogram to unilateral terms by deciphering with the dummy matrix. Next, solve the 
resulting unilateral cryptogram using any of the techniques learned with unilateral 
systems, including the use of trilateral frequency counts and the vowel and consonant 


lines. 


7 


6 4 
0/5 4/5 8/ 


e con 
7/2/0 5/1/ 


Ssance 
3/3/8/1/2/ 

yar 
9/9 0/8/9 


nsapp 
1/3/8/6/6/ 


rnam 
7/9 6/1/0 


g o 
7/0 8/0 5/ 

a | 
5 7/9 5/0 


aiss 


n 
1/8/7/3/3/ 


0 0 2z 
3/5 3/9 9 


5-9. Solution of Trilateral and Trinomic Systems 


Trilateral and trinomic systems are solved in exactly the same way as biliterals and 
dinomics. The systems are identified by the tendency of messages to break into groups 
of three instead of groups of two. With simple triliterals and trinomics, positional 
limitation is even more evident than it is for biliterals and dinomics. Look for a limited 
set of pairs of characters as either the first pair of characters or the last pair of charac- 
ters in every three, Once these are found, set up your coordinates and solve as before. 


Section III 
Analysis of Variant Multilateral Systems 


5-10. Identification of Variant Systems 


As with any coordinate system, analysis of variant multilateral systems begins with 
determination of the coordinates. If the product of the row and column coordinates is 
50 or more, the system is almost certainly a variant system of some kind. 


5-10. Analysis of External Variant Systems - 
Frequency Matching 


External variant systems are generally easier to solve than internal variant systems. 
Frequency counts can usually be used to determine which coordinates combine with 
each other on the same row or column, whenever the text is long enough to give a good 
representative sample, as shown in the next problem. 


I11UC RAPC OIPU IANU NMDR NIRI ISIU AILI PSPR AUUN 
AMDG ANPG URDU IMMA PRAU MROU RIIM NAMO ICDN UUUA 
UIOM ARAA AIII DSMI RRNO MMPU RGUR UNDS NIIA RMVA 
PSUC UONM IOAR RADU PUPG OCIA PUMO RCMM MCDR ROIA 
SORI ACNM UNRI IMIT SMRA ANNA SRNM ROMI NONR RAUC 


RIPN SADG AUPR IONA DUUU MRIA OGNR RAIR MAIA RGNI 
MOPO RAMM MUII DRPS MIAR MOAC DGUA URAC NISR NOIG 
DSSI RORM MINO MURU MMAI DOUA PGRR USXX 


cv 7A 3 OO 2 


a. The cryptogram used 10 different letters as row coordinates and 10 different letters 
as column coordinates. Using these coordinates, a digraphic frequency count has 
been completed as shown. For example, the letter | is paired with itself five times, 
so the number 5 appears in the matrix at the point where the row and column of I 
intersect. 


b. Examining the frequency count, we can see that there are good frequency pattern 
matches between certain rows and certain columns. For example, the I row and the 
R row are nearly identical. Similarly, the A column and the I column are nearly 
identical. Carrying this process further, we can match the row pairs, AU, DP, IR, 
MN, and OS. The column pairs are Al, CN, GS, MO, and RU. At this point, we 
have no idea in what order the coordinate pairs belong or which letter in each pair 
comes first or if it even matters which letter comes first. We have enough informa- 
tion, however, to reduce the cryptogram to unilateral terms. 


c. To reduce the cryptogram to unilateral terms, we set up a matrix with the combined 
coordinates and write any sequence of letters within it, for example, A through Y. 
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I KT SJ PK MO AK HJ EB 
OIPU IANU NVDR NIRI ISIU AIII PSPR AUUN 
E J 


al 
cio 
ZI, 
QYO 


DH BH NP JE TY KN PS LG EA 
AMDG ANPG URDU IMMA PRAU MROU RIIM NANO ICDN UUUA 
AX EA AK HP OS SJ ME BH PK NP 
UIOM ARAA AIITI DSMI RRNO MMPU RGUR UNDS NIIA RMVA 
HB DS NE KJ JH VK JS LS QJ NK 
PSUC UONM IOAR RADU PUPG OCIA PUMO RCMM MCDR ROIA 
XK BS BK NK XK BP YS NP ST KB 
SORI ACNM UNRI IMIIT SMRA ANNA SRNM ROMI NONR uc 
KG UH EJ NP JE TK WT KO PK MP 
RIPN SADG AUPR IONA DUUU MRIA OGNR RAIR MAIA RGNI 
§$! KS TK JH PE SB HA EB PY_ SM 
MOPO RAMM MUII DRPS MIAR MOAC DGUA URAC NISR NOIG 
HU NN PS TO SA IA HO C€ 

DSSI RORM MINO MURU MVAI DOUA PGRR USXX 


d. We see that repeats appear in the pseudotext that results from our trial decipher- 
ment. The repeats that were suppressed by the variants are now visible with the 
variants combined. The recovery of the plaintext is like any of the previous 
problems. When we recover the plaintext and enter the recovered values in the 
matrix in place of the trial sequence, we reach the solution shown below. 


HP OS 


and columns belong. Starting with the last row of the internals, we rearrange the 


e. With the plaintext values filled into the matrix, we can see in what order the rows 
columns of the matrix in alphabetic order. 


MR GAC 
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The first row of the internals should follow alphabetically after the third 
row—scdef, gikln. 


f. All that remains is to fill in the missing letters H, J, and Q in the plaintext sequence, 


and to try to recognize how the coordinates were constructed. As mentioned earlier, 
it is common practice to couple I with J or U with V when using a 5 by 5 matrix. 
Since J did not appt in the plaintext, we may assume it occupies an alphabetical 
position within the I block. The Q Se) belongs between the P and T, leaving the 
H in the top row. The plaintext keyword is BRAHMS (the classical composer). With 
that as a clue, the letters in the coordinates are shifted to their correct positions, 
revealing the keywords PIANO, DRUMS, MUSIC, and ORGAN. 


5-12. Analysis of Variants - Isologs 


Two or more encrypted messages with different encrypted text, but the same underly- 
ing plaintext are called isologs. When isologs are encountered, your job is much easier. 


Isologs are particularly useful in solving variant multilateral systems, either external or 
internal. 


a. Isologs can be recognized by one or more of these characteristics— 


e Identical message lengths. 


e Similar characteristics in the text, such as repeated segments or characters 
occurring in the same position in each message. 


e External indications, such as identical times of file or identical message numbers 
included in the header for each message. Normally, no two different messages 
from the same sender receive the same file time or message number. When you 
see the same time of file on the same date originating from the same unit, the 
messages are likely to be isologs. 


b. Two messages that showed the same time of file in the message header appear in 
Figure 5-3. 


Message 1: 


XLNH GVDV NZRH DKXH AMNV XMNK DZGP XVDH QHNB 
QCFH DVRP GLFP DSAZ RHFB DBFL DLGH RSFH QKRB 
TSDP QVNK DZFP DKQP QMAC RPRK NSRV NBFL FBNP 
DBLM FZGV ACRK TCTH XPTM NMRM DBFS FHRH NCRZ 
XCFV NBRL FPTS DHGK NKDZ 


Message 2: 


GYQB EDAD QTOW ATZM OPFT GSAY OTFD ZDKW KYZY VSQD 
EWOS ATGW KTGS FMKP OWFS LTQT ZDEM ARVS ERGW LDFW 
OYZB LTFT ZTOS FDVW EWOH QDLR GSZS AMQS QTLM FWOY 
ZDGH AWET GPZW GTQM ZRGD EPFM EYKM QTLM GSGW LBAS 
OTQW ZTER GWGB QBED ADZD OSAT a 


Figure 5-3. Isolog example. 


c. Each message shows positional limitations. Message 1 has the letters 
ADFGLNORTX in the row coordinate position and BCHKLMPSVZ in the column 
coordinate position. Message 2 has AEFGKLOQVZ in the row coordinate position 
and BDHMPRSTWY in the column coordinate position. The two messages are not 
encrypted in the same system, but they appear to be isologs. 


d. The initial step in solving these isologs is to see what values equate to each other in 
the two serge Pick one of the most frequent digraphs in either message as a 
starting point. For example, FH occurs four times in the first message. A frequency 
count, while not strictly necessary, may be helpful in spotting the most common 
values. The digraphs that occur in the same positions in message 2 as FH in 
message 1 are OS, GW, GS, and another OS. 


e. The next step is to find each of the digraphs in message 2 that equated to FH from 


message 1. The letters OS, GW, and GS in message 2 and the digraphs in the same 
position in message 1 are underlined in Figure 5-3. 


5-23 


5-24 


f. We now see that RH, RP, FP, and FH in message 1 equate to GS, GW, and OS in 


message 2. A check of the new values in message 1 adds the additional digraph OW 
in message 2, completing the equations for that set. It appears that R and F are 
variant row coordinates and P and H are variant column coordinates in message 1. 
Similarly, the message 2 variants are G and O on the rows and W and S on the 
columns. 


. Continue the process by picking additional repeated values. Complete the equa- 


tions for each, working back and forth between the two messages, just as we did for 
the initial digraph FH. Continue until all coordinates have been combined, or you 
run out of digraphs to compare. You can set up a plot to keep track of the equations 
as shown in the next example. 


Column 


Column Message 1 Message 2 


FR GS GW OS OW SW 
DN QD QT ZT ZD DT 
FD FT AD AT 
GQ ED ET LT LD 
AL OH GP GH OP HP 
TX GB OY GY BY 
VS VW KW 
FM AM AR MR 


h. Other combinations could have been selected than the ones shown, but these are 


sufficient to show all the variants in both matrices. From this point, either message 
can be reduced to unilateral terms and solved. Then the recovered plaintext can be 
applied to the other message to complete the recovery of the second matrix. Note 
that if the same matrix was used in both messages, the similarity should be quickly 
recognized and the solution accomplished more easily. The next paragraph shows 
the simpler technique when the same matrix is used. 


5-13. Solution Using Isologous Segments 


Segments of ciphertext which have the same underlying plaintext are known as 
isologous segments. A technique similar to the one used in isolog solution can be used 
any time repeated plaintext can be identified. This is likely to occur with repeated 
beginnings and endings to messages or with long repeated words and phrases. 


a. Recognizing repeated plaintext in variant systems requires painstaking inspection 


of the ciphertext. Computer indexes of repeated plaintext, which show repeated 
text on consecutive lines along with the preceding and following text makes repeats 


easier to recognize. In any long plaintext repeat, some of the ciphertext digraphs or 
dinomes are likely to repeat. Other ciphertext digraphs or dinomes are likely to 
show common row or column coordinates. Pairs with neither row nor column coor- 
dinates in common will generally be in the minority. Therefore, although a lot of 
trial and error may be involved, the longer repeated plaintext segments can often be 
identified. Consider the two message beginnings shown below. 


Message 1: 


3469 8489 2469 1420 8957 7238 2311 8840 9626 6269 
1429 1622 8924 ... 


Message 2: 
3368 6389 2468 1335 8807 7238 2316 6890 9636 6788 
7338 7127 6934 snace 


b. The similarities of the text make it quite clear that the underlying plaintext is the 
same in both cases, and the same matrix is used for both. Proceeding on the 
assumption that the plaintext and matrix are the same, it is easy to match the 
remaining values to determine the variants. For example, from the first dinome in 
each message, 3 and 4 are column variants. From the second dinome in each 
message, 8 and 9 are column variants. All the variants can be combined from this 
short example, and the remainder of the solution is routine. 


5-14. Analysis of Internal Variant Systems 


Internal variant systems are generally more difficult to solve than external variant 
systems. With no coordinates to combine, frequency counts do not provide immediate 
clues to variants. Similarly, isologous segments are harder to recognize. Some charac- 
ters are likely to repeat in isologous segments with internal variant systems, but the 
partial repeats caused by common row or column coordinates are much less likely to 
occur. Still, given enough messages from a single system to produce repeats; given 
operator carelessness in encryption; or given asia ee traffic, these systems can 
readily be solved, too. Once a plaintext entry is found, the remainder of a solution is 
not difficult. When you find isologs or isologous segments, you can equate ciphertext 
values just as was demonstrated in the internal variant examples. The only difference 
is that you do not combine coordinates through this process, but instead find all cells 
in the matrix that have the same plaintext value. 
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5-15. Analysis of Syllabary Squares 


Syllabary squares are closely related to small code charts, and the solution of both 
types of systems is similar. The analysis of syllabary squares produces some distinct 
differences. 


a. Isologs or isologous segments are not necessarily the same length in each case. The 
encipherment examples below are repeated from] paragraph 5-3e 


p: r ein for cem ent s 
c: 94 31 56 71 94 44 09 35 13 92 


p: re inf or cem ent s 
c: 98 28 74 59 44 09 39 92 


b. Isologous segments can often still be recognized by the plaintext values which have 
no variation. In the example, there is only one way to encipher the letters M and S. 
When REINFORCEMENTS is enciphered, the ciphertext equivalents of M and S 
will always be the same. Other values are likely to begin with the same row coor- 
dinate, since syllables beginning with the same letter are likely to be on the same 
row, such as the R and the RE. Still others will have a possible variation, but the 
variation will not be used. The repeated CE syllable in both segments is an example 
of this. As a result of all these considerations, isologous segments are often 
recognizable and provide a point of entry to the system. 


c. Solution of syllabary spelling will be further explained in| Part Six, Analysis of Code 


PART THREE 


Polygraphlc Substitution Systems 


CHAPTER 6 


CHARACTERISTICS OF POLYGRAPHIC 


SUBSTITUTION SYSTEMS 


Section I 


Characteristics of Polygraphic 
Encipherment 


6-1. Types of Polygraphic Systems 
As first explained in[Part One polygraphic ae systems are those in which the 


plaintext units are consistently more than one letter long. The most common type is 

digraphic substitution, which replaces two letters of plaintext with two letters of 

Sie There are also such systems as trigraphic and tetragraphic substitution. 
e larger oe are rare, and awkward to use in military applications, so they are not 


included in this manual. 


6-2. Digraphic System Characteristics 


The simplest type of digraphic substitution, if not the simplest type to construct, uses 
a 26 by 26 matrix with plaintext values as coordinates to two-letter cipherte> e 
within the table. A sample of a digraphic substitution matrix is shown in Table 6-1 


6-1 


Table 6-1. Digraphic substitution matrix. 


“(8 }e[¢| 2] 6] 2| 2/4] ele] 2/2] ale[e[s]e[[e[3[2[a[s] 2] 2] ¢| 
> S18) 5] 2) 2] 8] e[ a] alee 2] alae lel le la[elalel sls ely 
«(85/8 | <| 8] 5] 8] 8[5] <[5[s]e[6[e/5]<|s]5[s]5/<[s]s[= 
>(£]8/ 2) 8] 812) 218] 2ie/ ole] e[e[e/alels|slelsielyl el aly) 
-SIETRIEI SIS ETel bel els [Elele[etslels[slelslelsle[s) 
-|8/8/£/ 8] £/ 8] 8/¢| e[8/ 2] a/a/e/2/2/s/alelslalels/elala| 
~(£1 818] 8] 2/2] x] 8] 2/2] e/ el e[a[ele(elelylelylelelslaly 
(8216) 8/¢/2/ ¢/8[ e[e/e/ele/alalelalelalalelala|elale 
[else] 6] s/s] || &[s [#2] 6] | [ele lelelalele sels 
2H BEBE EBEBREEREEEEEEEEEEREE 
ol 5/3] 6[&] 5] 5/5[ [5/8] 5[=[2[ole[a[a[ele|2[alalel sls 
BE BREE EEREERERRERREBe 


| 
a 
ola! 3/5] e/e[elalel2l2lol2lalalelel lala 
Ei 
— 


MJ 


KL |x| 


at ta ck at da wn 


[FO| av] 34 
[FP] Go| aN] km |i [Mx] 03] 


{GP} 30] KN] LM {Mo | ox | 


: PC PZ FN PC CZ AK 


p: 
c 


RU|AR|BQ|DP 
DQ) 
FQ | 
/cQ| 
KQ| 
LQ | 
MQ) 
}OQ) 
[PQ| 
QQ | 
UQ| 
vQ| 
XQ | 
¥Q| 
29 | 
WO | 
1Q| 
INQ) 
HQ | 
}EQ| 
El 


EBEERERERREEEBEEREBEEE 
BEBEEEEREEBEEEEEERBREEERE 
BERBER ERERREBEREEBREREEE 
BEB RBERBEERRBERBEEREEREE 
AREER BERR ERE eee 
ER RRRRRRRERREERARREAREBR 


TU Uw wD oO me ee XY mH E fC Oa TF eH YH BD > BK AN 


EE A ee alsak cata 
EX 


hav] ex| aw] ev] sul TR|RQ]AP| BO] BN] Fu Gt | 3K Ka 


b 
c 


ro) 
Scae. 
com 
re ee =e) 
Susan ds 
Qaneds 
Se eO.5 
mses 
SoD ba 
KaOVUY 
2 OS YS 
SOLS 
Svan 
a5 S- 
Begee 
SsegoNns 
RaGkOos 
So Boe 
"oo S 
Enos 
Lo 
@apyee 
Lee s 
— 
23582 
Agsgns 
hia : 
bo SS, 
i | 
TH SB 
> sore 
Se ee ee 
TQrsv 
cE ey ee 
Ee og & 
we aS 
oR OE 
pa og 
Cras 
eae = Re 
ore & 
SS &E bp 
aqAo SS 
x Cre aS 
ag Bon 
oe VS ees 
A Sr 
my Bese 
=< SA oa 
rand 


be very useful as a direct aid to analysis. 
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b. Repeated plaintext words and phrases cause ciphertext repeats only when they 
begin in the same odd or even position. If both occurrences of a plaintext repeat 
begin in the odd position or both begin in the even position, the ciphertext repeats. 
If one occurrence is in an odd ae and one is in an even position, they will 
produce different ciphertext. As a result, nearly half of all plaintext repeats are 
suppressed. This is shown in these three alternate examples, all enciphered from 
Table 6-1 e 6-1 


at ze ro fo ur ze ro ze ro st op 
PC CV_EJ PJ DF CV EJ CV EJ DC Cl 


-a tz er of ou rz er oz er os to p- 
-- OS UF PU RB LS UF GS UF SD TJ -- 


-a tz er ot hr ee ze ro ze ro st op 
-- OS UF TC YF RV CV EJ CV EJ DC CI 


c. In the first example, all three ZEROs produce a repeat when they all begin in the 
even position. In the second example, they all begin in the odd position, and only 
the portions of the three ZEROS that appear as complete digraphs (the ERs) 
produce a repeat. In the third example, the two ZEROs that begin in the even posi- 
tion produce repeats, but the first ZERO, which begins in the odd position, does 


not. 


d. The suppression of individual letter frequencies and a significant portion of plain- 
text repeats means that digraphic systems are considerably more secure than 


unilateral systems and most multiliterals. 


6-3. Four-Square System 


Large table digraphics are awkward systems for military usage. In their place, there 
are several much more convenient small matrix digraphic systems available with 
about the same degree of security. The first of these is the four-square. 


a. The four-square consists of four 5 by 5 matrices in a square. The two plaintext 
letters and the two ciphertext letters of each encipherment each use a different 
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square. The squares marked p1 and p2 usually, but not always, contain standard 
sequences. The two squares marked c 1 and c2 can include any mixed sequence. 


jalblclale | P[t[alt{o| 
{a(n fiilk | elc[olelr 
m[njolp | c 


pl cl 


c2 p2 


p: mo rt ar fi re 
c: KF SN LM EO UR 


b. Encipherment or decipherment follows a rectangular pattern. Whether encipherin 
or deciphering, the letters of the digraphs are ioeated in the appropriately labeled 
squares. These letters form diagonally dieters corners of a rectangle. The 
equivalents, plaintext or ciphertext, are the remaining corners of the same 
rectangle. For example, plaintext MO determines the rectangle outlined in the 
square below. Plaintext M determines the upper row and the left column of the rec- 
tangle. Plaintext O determines the bottom row and the right column of the rec- 
tangle. The ciphertext equivalent, KF, is then found in the remaining corners in the 
appropriately labeled squares. 


p! cl 


c2 p2 


lees ere 


c. For a second example, to oe RT, R is located in the pl square, and T is 
located in the p2 square. The ciphertext equivalent of RT is found in the remaining 
comers of the rectangle prescribed by RT. The first ciphertext letter, 5, is found in 
the cl square in the plaintext T column and the plaintext R row. The second cipher- 
text letter, N, is found in the C2 square at the intersection of the plaintext R a 
and the T row. Tracing the letters from pl to p2 to cl to C2 is shown below. 


pli 


c2 


d. Decipherment is handled in exactly the same way, except that the ciphertext 
letters in the cl and C2 squares determine the rectangle by which the plaintext let- 
ters are found. 


6-4. Vertical Two-Square 


The two types of two-squares are simpler than the four-square system. The first is the 
vertical two-square, which uses two 5 by 5 matrices one on top of the other. Normally 
both squares contain mixed sequences. 


pl cl 


c2 p2 


p: al lq ui et on th ewes te rn fr on tx 
¢: CJ IU NH GU ON PL UZ UE TE MC HD ON QZ 
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a. The rectangular rule used with the four-square is used with the two-square, also. 
Whenever the letters to be enciphered are in the same column, however, the letters 
become their own equivalents. The encipherment of ON and TE in the example 
illustrates this. 


b. The case where the plaintext letters remain unchanged in the ciphertext is called a 
transparency. A weakness of this system is that in the long run, about 20 percent of 
the digraphs in a cryptogram will be transparencies. This is enough to give away 
more plaintext in many cases and enable a speedy solution. 


6-5. Horizontal Two-Square 


The second kind of two-square is the horizontal two-square, like the vertical, it uses 
two 5 by 5 matrices. 


p: we ha ve no ty et be gu nt of ig ht 
c: ZB FB ZR NA UY AY EB JC MW PL GI FW 


a. The rectangular rule again applies. In the horizontal two-square, values on the 
same row are replaced with the same letters in the reverse order. This is illustrated 
by the encipherment of the plaintext letters be and ig in the example. 


b. Digraphs in ciphertext which are the same as the plaintext in reverse, are called 
reverse transparencies. Like the direct transparencies of the vertical two-square, 
they occur in the long run in about 20 percent of the digraphs. They severely 
weaken the security of the system. 


6-6. Playfair Cipher 


The Playfair cipher is the most common digraphic system. Playfair is always 
capitalized, because it was named for a Lord Playfair of England. It is the simplest of 
systems to construct, using only a 5 by 5 matrix, yet it is more secure than uniliterals 
and most multiliterals. The rules of encipherment and decipherment are a little more 
complex than the previous digraphic systems. Sizes other than 5 by 5 are occasionally 
used. 


a. 


a 


io) 


jon 


p: th es ho th ea rd ro un dt he wo r! dx 
c: QB CU PQ QB NE AJ DT ZU RO CP VQ GM GV 


The first rule of encipherment and decipherment is the familiar rectangular rule. 
This applies any time the two letters to be enciphered or deciphered are not in the 
same row or column. The first four digraphs in the example follow this rule. One 
additional step must be remembered. In tracing the encipherment or ene 
in the matrix, always move vertically from the second letter to the third letter. For 
example, to encipher TH, locate the T and the H and move vertically from the H to 
the letter that is in the same column as the H and the same row as the T. Following 
this rule, TH is enciphered as QB, not BQ. Similarly, to decipher CU, locate the C 
and the U, move vertically from the U to find the first plaintext letter E and then 
the second plaintext letter S. 


When the two letters to be enciphered or deciphered are in the same row, follow the 
tule, encipher right, decipher left. To encipher or decipher, pick the letter to the 
oa or left of each letter of the given digraph, as appropriate. In the example, the 
plaintext letters R and D are in the same row. They are enciphered with the letters 
ey to the right of each letter, producing Sanaa AJ (or Al). If a letter 
to be enciphered is at the right edge, as in the encipherment of HE, the next letter 
to the right of the right edge is considered to be the letter in the same row at the far 
left. The letter to the right of E is P. Similarly, if deciphering, the letter to the left of 
the left edge is the letter at the far right in the same row. The letter to the left of F is 
N. Each row is treated as if it were written in a circle with the first letter of a row 
immediately following the last letter. 


When the two letters to be enciphered or deciphered are in the same column, use the 
rule encipher below, decipher above. To encipher EA in the example, the letters 
below E and A are N and E respectively. To decipher ZU, the letters above Z and U 
are U and N respectively. As with the rows, columns are treated as if they were writ- 
ten in a circle. The letter after the bottom letter in a column is the top letter; the let- 
ter before the top letter is the bottom letter. 


. The rules encipher right, decipher left and encipher below, decipher above produce 


the acronyms ERDL and EBDA. For al analysts, it is convenient to memorize 
these pronounceable acronyms to remember the rules. 
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e. The rectangular rule and the row and column rules take care of all possible cases 


except double letters. In the Playfair system, there is no rule for enciphering or 
deciphering a double letter in the same digraph. When double letters are encoun- 
tered in plaintext in the same digraph, the cryptographer must break up the double 
letters with a null letter, such as inserting an X between them. As a result, double 
letters will never be encountered in the ciphertext, except in error. This is only true 
of the Playfair system. Four-squares and two-squares can handle double letters 
without any problem. 


Section II 


Identification of Polygraphic Substitution 


6-7. General Digraphic Characteristics 


Certain identifying characteristics are common to all digraphic systems. Other charac- 
teristics appear only with specific systems. 


a. 


Message lengths, repeats, and distances between repeats are likely to be even in 
length in all digraphic systems because the basic unit is two-letters. Furthermore, 
the systems which use 5 by 5 matrices will often only use 25 letters, omitting either 
the I or the J in ciphertext. In some cases, these values will be used alternately just 
to ensure use of all letters. 


. Digraphic systems are most often mistaken for biliteral with variant systems, 


because both exhibit ciphertext which breaks into units of two and both can use 
most letters. The key distinction to look for between biliterals and digraphics is the 
complete absence of any positional limitation (paragraph 5-5b)|in digraphic 


systems. 


. Two-square systems stand out because of the director reverse transparencies. Scan 


the text for the presence of good plaintext digraphs, either direct or reversed, to 
identify two-square systems. Direct transparencies indicate vertical two-squares; 
reversed transparencies indicate horizontal two-squares. 


. Ifno double letters are present in a digraphic, it is probably a Playfair system. 


Monographic frequency counts for digraphic systems are not as flat as random text 
and not as rough as plaintext or unilateral systems. They generally fall in between 
the two. The monographic phi test can be used to confirm this, if necessary. 


6-8. Digraphic Frequency Counts 


There are several types of frequency counts you can take for working with digraphic 
systems. 


a. 


b. 


The most common way to take a digraphic count is to break the text into digraphs 
and count those digraphs. For example, given text ABCDE FGHI] . . . , you would 
normally break it as AB, CD, EF, GH, IJ,... . There are two other ways to take a 
dea count, however. If you are unsure whether there may be indicator groups 
or null letters at the beginning, you may not know where to begin breaking the text 
into digraphs. As a comparison, you can skip the first character and begin 
separating the text into digraphs beginning with the second character. This will 
po a completely different set of digraphs than the usual method: A, BC, DE, 

G,HI,J... . The third way to produce a digraphic count is to combine the two 
methods to count all possible digraphs. In this case, you would count AB, BC, CD, 
DE, EF, FG, GH, HI, JJ, ... . Unless you have a reason to want an alternate method, 
stick to the first method. 


There are two ways to record your count on paper. One is to make a 26 by 26 square 
on graph paper, and mark the digraphs in the appropriate cells. The other way, 
useful with short cryptograms, is to write the letters A through Z horizontally, and 
mark the digraphs by putting the second letter of each digraph under the first letter 
of the digraph in the A through Z sequence. Then by scanning the columns under 
each letter for repeated letters, you can readily spot repeated digraphs. This 
method takes much less space than a 26 by 26 square and gives you the same infor- 
mation. 


6-9. Digraphic Coincidence Tests 


The phi test and phi index of coincidence can be calculated for digraphic frequency 
counts as well as monographic. 


a. The digraphic phi test is calculated in essentially the same way as the monographic 


test. In the monographic phi test, 1 out of 26 comparisons in random text was expec- 
ted to be a coincidence for a pe of 0.0385. In the digraphic phi test, 1 out of 
676 comparisons is expected to be a coincidence for a probability of 0.0015. The 
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ieee of a coincidence in plaintext is 0.0069 instead of 0.0667. Thus, the 
ormulas for the digraphic phi test are— 


2 @p = 0.0069 N (N — 4). 
2 or = 0.0015 N (N — 1). 
2 oo = Hf (f- 1). 

2 AIC = 676 sf (f — 1) = 2 g0 

N(N—1) 2oer 


N is the total number of digraphs counted. 
The frequency of each repeated digraph is f. 


b. As discussed in the first part of this chapter, digraphic ciphertext frequencies will 
occur with the same numbers as plaintext frequencies when digraphic systems are 
used. If the digraphic 0 is close to @p but the monographic 00 is low, the system is 
likely to be a doaphie system. If you are using the index of coincidence form of the 
test, the expected 2 AIC is 4.6. The results are much more variable than the 
monographic test, because of the large number of different elements counted, but it 
can still be used as a guide. As with any statistical test, the results should not be 
used by themselves, but used along with all other available information. 


6-10. Examples of System Identification 


Three messages in unknown systems follow to show the process that leads to system 
identification. Repeats are underlined, monographic and digraphic frequency counts 
are shown, and monographic and digraphic ICs are calculated for each. The three 
messages were all sent by the same headquarters to subordinate elements, and all con- 
tained a common message serial number in their header. 
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a. Message texts and data. 


Message 1: 


IUZZ TVKP VYUY JWTZ CUIK 


——S 


XCEI SVJC XIUT IDDI ETWM 


ee 


TVCX XSWM WZW JEVH HCIJS 


IWHH ISWC TIXP ZTVK RIKU 


IKCU ISDV UHVM IRPC WUTU CJZK VUTV JTNI XMIB VYUZ 


JVTW EIZT VKEC JEIX CCXX XICM IZEV HH 


CK CZZ1 ZEVH 


UVEI SYUI ZZTV KKIJ 


—. 


HCC] SYJJ IEIZ ZCUP HISW ECXK 


eed 


AUII J 


K L MN O P QRS TUVWxX ¥ Z 


J 
O 10 28 13 11 


I 


A B C DE F GH 


1 


16 


5 


8 13 15 18 10 11 


0 4 2 


1 


5 


Oo 


19 3 11 0 


1 


Total letters = 205 


Monographic IC ~ 1.74 


JI 6 LMN OP QRS TUVWxX YZ 


A BC DEF GH 


KCMVUAMWKLUTHHN¥YASZONOLNED>S BREN 


Total digraphs = 102 
Digraphic IC = 3.41 
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Message 2: 


NPEG MISY DQQR PATH GFTS LYUV DNPR RWIP SPDR AGYL 
RKBE FIPO EGLY RFCZ AFFP SYLE KZLF SDFN LRVI NPOC 
CRYL NCYL FMPT HTYA IWES TNNE VARP TNPO OZLR YAOW 
IPAV PNUE AINP XKGV EFGE EGKY RLGS AIBP KZGF NCUV 
IAUA_THGF GVSI PVRA EFUV AGYI LFSD EBKR TPEF SIYL 


UVDN PRLA VNYL ARXX 


A BC DE F GH 13K LMN O P QR 5S TUVWX ¥ 2 
15 3 5 6 13 14 12 3 12 0 6 14 2 13 5 18 2 15 10 8 6 113 3 134 


Total letters — 216 
Monographic IC = 1.26 


A B C DE F GH ! 3K LMN O P QR §S§ T UV WX ¥ 2 


Total digraphs = 108 
Digraphic IC = 5.38 


N<XB<CAMNDAOVOZSE TAU TODMOATS 
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Message 3: 


GMGH NGMO RWOG GOEG HWWM HOHR GLNM GEGG HDND HADD 
OONL MFRM GFER MLEE GEYO NANW GAGW GFRF YDYL DOMA 
MRYG YFOW ODGR HLNG RWDW YAGM OOOL OAOW NFHM GOAD 
DOGW GDHG DWDG HOYD GVOO OWAR MVHM GERL NEOO RANL 
DWRL NDNA DOOG DLHR YLHG HEED OWYR ERNG HWYA HFYL 


YGGL RFML GRYA HFHE GAGM EOCOW RWAG DOOM GRNW NLMF 
HLEH GFGO YMOW RMHF GERA NMYD HAYF OORW NGYD MWRO 
MODW NDEG DOVM YVMHR GGHD YDMA NGMF_RMDW MVNF HEHD 
GHND YGGL ODYW GAHL CONF OWRF MMYG YAAE HDDO DDHW 
YMNG MORL YLGE YFDW DGNO NAOO MFRM HMGR RACE DOGL 


DRNL OWDO HAXX 


A B C D E F GH 139K L MN O P QR SS T UV WX ¥Y 2 
23 0 O 40 20 19 54 32 0 0 O 22 40 26 50 0 0 31 0 0 0 0 27 2 26 0 


Total letters = 412 
Monographic IC = 2.16 


MN O P QR S$ T UV WX ¥ Z 


eX BK CHHUTAOVOZE CAG TOAWwMIOT> 


pofofotojtofo{ofojo} ojo | 0 
Pa fofotsfols(slofofolols(3 oli fofolifofofoltoti|ololo| 
z[ofofovoveyolvofofofopofofoyotofofofofoyofolfofofolole| 
Total digraphs = 206 
Digraphic IC = 8.90 
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b. Different analysts might approach the identification of the systems used in these 


messages in different ways, but here is one example of how the systems can be iden- 
tified. 


(1) Although the messages all carry the same aes serial number, which is 
usually a sign of isologs, the messages are all different lengths. If they are 
isologs, they are not enciphered in the same system. 


(2) A comparison of monographic frequency counts confirms that they are in dif- 
ferent systems. The highs and lows in each frequency count are too different for 
any possibility of repeated use of the identical system. 


(3) The ICs give a different picture in each. Message 1 has monographic and 
digraphic ICs consistent with plaintext or a unilateral system. The digraphic IC 
of 3.41 is slightly below the expected 4.6, but it is within acceptable limits. 
Message 2 shows a low monographic IC of 1.26, but the digraphic IC of 5.38 is 
also well within plaintext limits. This is typical of digraphic systems. Message 3 
is quite high in both monographic and digraphic ICs. 


Messages 1 and 2 use nearly all letters. Message 3, which is twice as long as 
message 1, uses only 14 different letters. The high ICs and the limited letter 
usage are consistent with a biliteral with variants system. A close inspection of 
the digraphic frequency count will show rows and columns with very similar 
patterns, suggesting external variants that can be combined. Different letters 
are used in the row position than those used in the column position. This 
positional limitation confirms the identification of a biliteral with variants 
system. 


——~ 
= 
nm” 


(5) Message 1 has the most repeated text, which is consistent with a unilateral 
system. Message 2 has only a few repeats and message 3 has only short and 
fragmentary repeats. In message 3, the fragmented repeat on lines 7 and 10 are 
in the identical relative position in message 2 as the ZIVK repeat in lines 2 and 
5 of message 1. This similarity strongly confirms that the two messages are 
isologs. 


(6) The identifications of the systems in messages 1 and 3 are clear at this point, 
but message 2 still needs to besclarified. The underlined repeats in message 2 are 
in the same relative position as in message 1, if you adjust for the slightly 
increased length of ihe message. Only some of the repeats from message 1 
aa in message 2, however. This is consistent with a digraphic system, which 

will only show repeats that begin in the same even or odd position. 


(7) In message 2, a check of the long diagonal from the AA position to the ZZ posi- 
tion of the digraphic frequency count shows that the only double letter that 
appeared was the filler XX at the end of the message. The Playfair is the only 


digraphic system which will not show double letters. Finally, because the 
Playfair cannot encipher double letters, all double letters that occur in digraphs 
must be broken up by the insertion of null letters. This characteristic explains 
how it can be an isolog, but appear slightly longer. The three messages are all 
clearly isologs, and the systems are confidently identified, lacking only the final 


solution for full confirmation. Solution techniques for each of the major 
digraphic system types are explained in the|next chapter 
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CHAPTER 7 


SOLUTION OF POLYGRAPHIC 
SUBSTITUTION SYSTEMS 


Section I 
Analysis of Four-Square and 
Two-Square Ciphers 


7-1. Identification of Plaintext 


Recovery of any digraphic system is largely dependent on the ability to correctly iden- 
tify or assume plaintext. As with any system, isologs and stereotyped messages can 
help a great deal. Pattern words can also be of assistance. With uni sis systems, pat- 
terns of repeated letters provided an assist. With digraphic systems, patterns of 
repeated digraphs can do the same thing} Appendix D, pepaning 
includes several types of word pattern tables. 


é first type, listed on pages D-38jand 
9 shows patterns applicable to any ace system. The means representing 
d ob patterns are simpler than those for unilateral patterns. The patterns identify 
the repeated digraph in a word or phrase by the letters AB in each case, and non- 
repeating digraphs are just represented by dashes. Here are a few examples that show 
how the patterns are formed. 


DE CO DE 
AB -- AB 


PO ST PO NE 
AB -- AB -- 


MA IN TA IN IN G- 
-- AB -- AB AB -- 


-M AI NT AI N- 
== AB == AB << 


7-2. Solution of Regular Four-Squares 


Regular four-square ciphers, in which the plaintext squares are in A through Z order, 
are slightly easier to solve than the type with all mixed squares. 


Four-square word patterns are shown 
represented by the repeated letters only, placing A, C, E, and soon in the first letter 
ea of digraphs, and B, D, F, and so on in the second letter positions. sees 

etween different positions are ignored. Following these rules, a few examples of 
four-square word patterns appear below. 


it produces KL KO NS SW. 
on pages D-45) throug. | D-47, The patterns are 


re ques te d- 
UR UM AU US OY 
A- A- -- A- -- 


el emen ts 
PK LK AK RQ 
-B -B -B -- 


qu ar te rmas te r- 
UM LM US QF AM US RW 
AB -B AD -- -B AD -- 


b. Identifying the four-square from other digraphic systems is largely a matter of 
elimination. It will include double letters, unlike the Playfair. It will not include a 
high proportion of good plaintext digraphs or reversed plaintext digraphs like the 
two-squares. There is no ready clue to tell whether a four-square is a regular one or 
not, but it is often easiest to assume the simplest case for a start and only consider 
more complicated construction when the simple case fails to produce a solution. 


c. To demonstrate the use of four-square word patterns and recovery of the system, 
consider the cryptogram shown below. 


TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD OP 


d. The underlined repeats give a chance to try a four-square word pattern as an entry 
to the cryptogram. 


DM FI PK RO FM 
-B A- -- -- AB 
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The only word with this pattern in| Appendix D] Djis INFORMATION. Placing 
INFORMATION in the text, and beginning reconstruction of a regular matrix 
produces the next example. 


in form atio n 
TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 


in 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 


form atio n 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD QP 


HI cl 


c2 p2 


e. The recovered values have been placed in the matrix, and the alphabetic construc- 
tion is apparent. Additionally, four values have been placed outside the matrix for 
the moment as suggested by the plaintext Ns at the end of INFORMATION. H and 
I must be in the same row as plaintext N. R and Q must be in the same column. 
Several additions can now be made from the alphabetic construction. L and N fit in 
the third row of the c2 matrix. Further, if H and I are in the third row of the cl 
matrix, then they must be the first two letters on that row and G is the last letter of 
the second row. Placing all of these in the matrix and using the partially recovered 
matrix to decipher as much plaintext as possible produces the next example. 


llin form atio n at 
TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 


c at in 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 


form atio n h 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD QP 


jalole{dfe} | | [ry | 
tlelntilile| | [olr[a| 
fmm fo fp frft | | 


p! P| |e 
eis[t ful fel | | 
wixty fz] | tT 

c2 p2 


f. Next, suppose that Q in the cl matrix is in the keyword. If so, the U would normally 
be with it. There are not enough letters left in the alphabet after the P in the cl 
matrix to put both Q and U at the beginning, so Q is almost certainly right after the 
B. 


g. We can be fairly confident of the recoveries up to this point. A number of 

ossibilities present themselves, but as they are only possibilities, the work should 

e done lightly in pencil. We can next try placing the Q and R in the c2 matrix. The 

Qis mote likely to be in the sequence than the keyword, so we will tentatively place 

it in the fourth row and R in the first row. We can place P in the fourth row, also, 

before Q. Another possibility is to place plaintext A on line one of the message, 
forming the word ALL before INFORMATION. 
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a llin form atio na at 
TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 


ct rs at in 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 


form atio nr he rs 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD QP 


pl el 


74 p2 


h. Next consider the plaintext RS on line two. It must certainly be preceded by a 
vowel, therefore, the ciphertext digraph SM must produce a vowel in the p2 posi- 
tion. The only vowel in the same row in the p2 matrix as the ciphertext M in the c2 
matrix is plaintext O. S must be in the fourth column of the cl matrix above the 
plaintext O. The only logical place for the S is on the fourth row. Adding the S and 
entering the values increases our solution as shown in the next example. 


a llin form atio na at 
TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 


ct tors to at in 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 


form atio nar st he rs 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD QP 


ie) 
afbieldlel | | (Ri 
BAD BEG 


cl 


c2 p2 


Q q 
PET [ell xfyl | 


i. These additions suggest several possibilities. STOP may appear in the middle of 
line 2. REQUEST may be the word after INFORMATION on line 3. Placing these 
values produces good alphabetical progression in the matrix and many more plain- 
text possibilities. 


qu a llin form atio at 
TATO UTOD HIDM FIPK ROFM HRVH BMAH NHKM UNAN ZMRO 


ro ct it nsou ns tors topu pdat edin 
SKHH RQBX FSYF KQNS QFAT KQUY SMQP SMNT MYRO RYDM 


form atio nreq uest edby he ers 
FIPK ROFM IQLT TYSQ RYRV FEDC ATGR RHTO AOTD QP 


pl cl 


c2 p2 


j. From here, the solution is routine. REQUEST is the first word. HEADQUARTERS 
is the last word. These values in turn fill in enough blanks in the matrix to recognize 
the keywords and complete the solution. The keywords are LAUREL and HARDY. 


7-3. Solution of Mixed Four-Squares 


ae different techniques must be used when standard sequences _are not used 

nthe pl and p2 squares. The specific four-square word patterns 4 EE 
| throug 'D-47ino hE apply, althou eh the general digraphic patterns that 
precede them orj pages D-38 and B39 are still applicable. Generally, because the 
matrix construction is less orderly, more text must be known or assumed to suc- 
cessfully complete the solution. The problem that follows shows how the solution can 
be approached with mixed squares. 
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FMFE FMPX ZPYX IYYP GGME TXGS YGGB_YLFI HAGB YLMK 
MRGH_YRFM BYYP MVMBQ YMHD MHLN MNOS YPVI DMXH RPGL 
MNSO QLMP GBYL VGQI QLYX KTZG HEEM GBKM FLYK PHMA 
SREE GDMK DEBG TTEB IXCN VINI SOSC HHIG THHM OQPO 
TGKI VGQI PMXR CPGH YRSE PLMN LNMN ACVC OCCO KPWC 


PKIP PCSU GHYR FKSC YGXX 


a. The above cryptogram has been identified as a four-square. Previous messages from 
the same headquarters have been signed by ADAMS or MILLER. The repeated 
segments in the text suggest several possibilities for plaintext. 


(1) The AB -- AB pattern at the beginning fits the common stereotype 
REFERENCE. 


(2) The repeated GBYL segments appear to be numbers, and the number of charac- 
ters is exactly right to fit in the expanded stereotype REFERENCE YOUR 
MESSAGE NUMBER, before the numbers. To add to this, recent messages 
from the addressee have been numbered in the mid 4500s. FOUR FIVE FOUK is 


probably the text of the first three numbers. 
(3) GHYR occurs at good sentence length intervals and is probably STOP. 


(4) These possibilities give enough values to begin reconstructing the matrix. 


b. If you assume that standard p1 and p2 squares were used, entering the values in the 
matrix produces conflicts. The squares must be mixed. To recover a mixed four- 
square, divide a sheet of cross-section paper into four areas, representing the four 
squares. The areas cannot initially be limited to 5 by 5 squares, although eventually 
the recovered values will condense into that size. Proceed by entering each plain- 
text and ciphertext pair of digraphs into the appropriate areas, maintaining the 
rectangular relationship. Start new rows and columns for each pair entered unless 
there are one or more values in common with previous entries. The entries for the 
first seven pairs are shown in the next diagram. 


refe renc eyou rmes sage numb erfo urfi vefo ur 
FMFE FMPX ZPYX IYYP GGME TXGS YGGB YLFI HAGB YLMK 


st op 
MRGH YRFM BYYP MVMBQ YMHD MHLN MNOS YPVI DMXH RPGL 
four 
MNSO QLMP GBYL VGQI QLYX KTZG HEEM GBKM FLYK PHMA 
SREE GDMK DEBG TTEB IXCN VINI SOSC HHIG THHM OQPO 


st op 
TGKI VGQI PMXR CPGH YRSE PLMN LNMN ACVC OCOO KPWC 


sto 
PKIP PCSU GHYR FKSC YGXX 


E|Mle 
PET LT txt Ty fel fel | TT 
tet tt 


c. The first digraph pair entered was plaintext re equalling ciphertext FM, appearing 
in the inner corners of the four areas. We will use the notation re=FM to represent 
such pairs from here on with the plaintext in lower case. The next pair, fe=FE was 
placed on the same row as the first pair because of the common letters with the first 
pair. The entries continue, placing the letters on new rows and columns except 
when previously used values occur, The eighth pair, es=YP, presents a new situa- 
tion. Plaintext e and ciphertext Y are already on di ifferent rows. The new pair shows 


that these two rows should be combined. The diagram below shows the entry before 
combining the rows. The rows are combined by writing the plaintext o of the first 
row in the same position on the second row. 


d. When all entries have been made and all rows and columns combined wherever 
ossible, the aie appears as shown below. All plaintext that can be deciphered 
rom the partially recovered matrix is also filled in. 


refe renc eyou rmes sage numb erfo urfi vefo ur 
FMFE FMPX ZPYX IYYP GGME TXGS YGGB YLFI HAGB YLMK 


st opre es e es a 
MRGH YRFM BYYP MVBQ YMHD MHLN MNOS YPVI DMXH RPGL 


four ou e fo 
MNSO QLMP GBYL VGQI QLYX KTZG HEEM GBKM FLYK PHMA 


———a 


SREE GDMK DEBG TTEB IXCN VINI SOSC HHIG THHM CQPO 
r st op 
TGKI VGQI PMXR CPGH YRSE PLMN LNMN ACVC OCOO KPWC 


stop er 
PKIP PCSU GHYR FKSC YGXX 


SRE GERES 
| { { fulelof | Ty izivi | YT 
PTT TT det Ty lel ie] | tT 
PP tet; Tt 
PT TT TT fete? | TTT TT 
PET TT ke TT fel ful TT TT 


Pt Ti det TTT tyis] TY 
ER Paw Eke fe 
Pit delet TTT TT et fal | 
LL ti | 


e. More plaintext can be added at this point. The four-letter number after FOUR 


oh 


FIVE FOUR must be NINE, because ZERO will not fit properly in the matrix. The 
word beginning at the end of the first line is probably REQUEST, and the sender is 
MILLER, not ADAMS. When these recoveries are added to the matrix, there are 
enough recoveries to see the basic structure of the four-square. 


pol ey 
fofes| ee =] 
Pj fe} Te et 
mim) 

| 


. Each area shows signs of alphabetic progression. The upper right area shows partial 


rows with the letters FGI, MPT, and YZ. The lower left has rows with IK and XY. 
The upper left has columns with fg, mno, and qrt. The lower right has a column with 
prsu in it. These patterns eee that the plaintext squares Fipet left and lower 
right) use sequences entered by columns and the ciphertext squares use sequences 
entered by rows. With this in mind, the rows and columns can be rearranged. The 
most obvious place to start is to rearrange the rows so that the partial sequences 
FGI, MPT, and YZ are the last three rows in the upper squares. 
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g. Moving these three rows put the letters mno and fg in the correct order in the upper 
left area. The row before these. three rows also appears to be eube) placed. Now 
examine the column arrangement. In the upper right area, the Y and Z are probably 
in the last two columns in the original matrix. With the T placed directly above the 
Y, there are just enough spaces to fill in UVWX between the T and the YZ on the 
bottom two rows. Then, with the U appearing in the alphabetical progression, the Q 
is probably the missing letter on the fourth row. The complete fourth row can be 
placed in MPQTU order. Similarly, in the upper left area, the fg, mno, and grt 
columns are probably the second, third, and fourth columns of that matrix. We can 
now rearrange the columns so the first five columns on each side of the center line 
reflect the original order. 


BORERR EERE: 


h. The rearranged matrix suggests many more possibilities. In the upper left area, 
uvwxyz can be filled in as was done with the upper right. In the upper right, the G 
can be moved next to the F, combining two columns. Rows can be rearranged in the 
lower areas. Examining the lower right area, the fourth column must include the q 
by the same logic as was used in the upper right area. The correct order is pqrsu. 


i. All the rows and columns outside the 5 by 5 squares can be systematically placed in 
the squares by following the alphabetical order. Fully combined, the four-square 
appears below. 


j. The remaining values are easily recovered by using this matrix to fill in more plain- 
text in the cryptogram. The additional plaintext will suggest still more plaintext, 
which can be used to complete the four-square. 


7-4. Solution of Two-Square Ciphers 


The solution of two-square ciphers, either horizontal or vertical, is similar to the solu- 
tion of a mixed four-square, only much simpler. The worksheet is divided into two 
areas by a vertical or horizontal line, as appropriate, instead of four. Plaintext is much 
easier to recognize because of the transparencies that occur. Matrix reconstruction 
proceeds, like the four-square, by entering digraph pairs in their rectangular 
relationship, except for transparencies, which are plotted in the same row or column. 
New values are plotted in new rows and columns, unless one or more values are in com- 
mon with previous plots, as with the four-square. As recovery proceeds, working back 
and forth between the matrix and the text, the two-squares can be combined and con- 
densed to the original form, like the four-square. 


Section II 


Analysis of Playfair Ciphers 


7-5. Security of Playfair Ciphers 


Breaking into Playfair ciphers is similar to the solution of mixed four-squares in some 
respects and very different in others. 


a. The Playfair shares the rectangular principle of encipherment with four-squares 
and two-squares, but it is complicated further by the EBDA and ERDL rules. When 
recoveries are plotted, every possible rule must be considered, not just the 
rectangular rule. 


b. Recognition of plaintext is aided by another type of word pattern that occurs with 
Playfair only. Whenever a plaintext digraph is repeated in reverse order, the cipher- 
text appears in reverse order, too. This does not happen with four-squares and two- 
squares. It occurs whichever rule of decipherment is used. The word DEFENDED, 
for example, has a Playfair word pattern of AB -- -BA, the same as DEPARTED, 
RECEIVER, and a number of others. Playfair word patterns are listed_in 
pendix D, pages D-40|through| D-42| The general digraphic word patterns off pages| 


f——y ( ) 
and D-39 can also be used. 
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7-6. Reconstruction of Playfair Ciphers 


To illustrate the analysis of Playfair ciphers and the reconstruction of the Playfair 
matrix, consider the following message. This message was sent from a brigade head- 
quarters to three subordinate battalions. 


DT BV VF GO OG MV CQ IH NS MN VI FC IK FK NX KH UB GK AV LH 
CA CF WC YC IA VM PB CI FK CA GV UH NC BX OV LY NU CQ ED GO 
OG MV_CQ VW OV UB CH CH CM OV UO BX OV YG DH HB KR CY OG MV 


TQ RH OC NS NB GS LG FN RH GO CV MX VM SL FU CM GO XK _AV KT 
GH KT_GH DT CB YV TQ 


a. Initial plaintext recoveries are fairly easy with this message. 


(1) The XK AV repeats on line four strongly suggest ZE RO with another four digit 
letter group in between them. The numbers are most likely to be a spelled out 
time. 


(2) YV TQ, appearing after the time and at the end of the message, is probably 
ST OP, 


(3) The series of four letter repeats beginning with ZE RO at the end of line five 
and continuing on line six before the final ST OP is probably another time. 


(4) The repeat GO OG MV CQ has a number of possibilities in|Appendix D, 
st likely to be 


but in the context in which the message was sent, it is mo 
B AT TA LION. 


(5) If BATTALION is correct, then the partial repeat beginning at the end of line 
three represents the plaintext TA LI ON. This is again part of the word 
BATTALION, but the word started out as an even letter division with the 
bestia! BA. TT, the next digraph, is impossible with the Playfair system, so a 
null must have been inserted, probably TX. With the addition of the null, the 
remainder of the word is divided into digraphs, as before, to produce the partial 
repeat. 


(6) The ciphertext in the middle of line four, GO OG OE GO, which deciphers 
as AT TA -- AT using the common values from B AT TA LI ON, is probably 
AT TA CK AT. 


b. These plaintext recoveries give more than enough information to reconstruct the 
original Playfair matrix. The trickiest ae in matrix reconstruction is to pick the 
best starting point. As every possibility for the matrix is plotted, it can get very 
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complicated. Careful selection of what values to place first can reduce the com- 
plexity a great deal. The cryptogram is repeated below with all recovered values 
filled in to assist in finding the best starting point. 


b at ta li on 
DT BV VF GO OG MV CQ IH_NS MN VI FC IK FK NX KH UB GK AV LH 


il on bat 
CA CF WC YC IA VM PB CI FK CA GV UH NC BX OV LY NU CQ ED GO 


ta li on ba tx ta li 
OG _MV_CQ VW OV UB CH CM CM OW UO BX OV YG DH HB KR CY OG MV 


on at ta ck at ze ro ze ro ze ro st 


op il, at ze ro 
TQ RH OC NS NB GS LG FN RH GO CV MX VM SL FU CM GO XK_AV KT 
GH 


st op 
KT_GH DT_CB YV_ TQ 


(1) Usually the best starting point, if available, is to select a digraph pair where 
there is a letter in common between the plaintext and ciphertext digraphs. 
These only occur when adjacent rows or columns are involved, using the ERDL 
or EBDA rules respectively. This problem does not have any recovered digraph 
pairs with a common letter, so another starting point must be found. 


(2) The next best starting point is to find two digraph pairs with at least two letters 
in common between the two pairs. The ro=AV and at=GO pairs share the As 
and Os in common. Other pairs are also possible. 


(3) The reconstruction begins by taking one of the selected pairs and plotting each 
possibility for it. All three rules must be considered. The three separate plots 
that follow show the result of plotting ro=AV for the rectangular rule, ERDL, 


and EBDA in turn. 
Rectangular rule: ERDL: EBDA: 
R A RA OV R 
A 
©) 1@) 
i Vv 


(4) The positioning of the letters is arbitrary. In the rectangular plot, we do not 
know that R is to the left of A or above V. We do not know how many rows and 
columns occur between the characters. We only know that the four letters form 
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a rectangle if that is the correct rule. In the ERDL plot, we do not know that RA 
is to the left of OV or if there is a column in between the pairs or not. Similarly, 
in the EBDA plot, we do not know that RA comes above OV or if there is a row 
in between. The spaces and placements are unknown until the reconstruction 
has proceeded further. 


(5) The next step is to add our second pair to the first plots. Again, we have to con- 
sider all three rules as we add the second pair. With three possible rules for each 
pair, there could be as many as nine different possible plots after two pairs if we 
did not select some letters in common to limit the possibilities. 


(6) Consider first, the addition of at=GO to the rectangular plot of the first pair. 


R A G 
Vv 


(7) ERDL cannot be used with the second pair, since we have already placed A and 
O in separate rows. To use ERDL, they must be in the same row. 


(8) When EBDA is applied to the at=GO pair and linked to the ro=AV rectangular 
plot, the plot looks like this. 


R 


On OD 


Vv 


(9) When we try to link at=GO to the ERDL plot for ro=AV, it cannot be done. 
With A and O in the same row, the rectangular plot and the EBDA plot cannot 
be applied properly. If we try to plot ERDL for at=GO, it results in six different 
letters on the same row, which is not possible in a normal Playfair. Therefore, 
we can cross out or erase the ERDL plot for ro=AV. 


(10 


— 


We next plot all possible rules for at=GO with the EBDA plot for ro=AV. The 
rectangular rule is the only possibility. ERDL for at=GO is impossible, 
because we have already placed A and O in the same column. EBDA is im- 
possible, because it would place six different letters in the same column. 


R A G R 


Vv Oo T 


O14 a> 
<O > 
ra) 
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(11) The next step is to again pick a digraph pair with at least two letters in com- 
mon with the letters already plotted. The most obvious possibility is the 
ba=KR on line three. Following the same approach as we did with the second 
pair, we find four possibilities this time. 


(12) Both st=YV and op=TQ have two letters in common with the recovered 
diagrams. Checking all possibilities for each of these produces the next four 
diagrams. 


(13) Various approaches can be used to further build the possible diagrams. One 
approach is to try to recover more text. The repeated KT GH is certain to be a 
spelled out number. If we try to decipher KT using all of our trial diagrams, all 
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but the third one produce plaintext -O. The third diagram produces G-. From 
these results, we can rule out the third diagram, since no number has a G in the 
first position. The number FO UR is the only likely plaintext with O in the 
second position. We add fo=KT to the three remaining diagrams and then try 
to fit ur=GH. In each case, only the ERDL rule will apply. The last of the three 
remaining diagrams is also eliminated, since ur=GH cannot be plotted. We are 
left with these possibilities. 


RH A UG 
V 1°) T 
B K F 
S Y 

Q P 


Ss Y 


AUGRH 

Oo TY 
FB 
P 


(14) The second diagram above is impossible, since there is no way to fit the SY so 
that it aligns with the row above it. We are finally down to a single diagram, 


and with careful selection of digraph pairs to plot, we can keep it to a single 


diagram. Next we will plot on=CQ, tx=CY, and ze=XK. 


RH 
V 
B 
S 


QO N KR O YF 


U 


o> << NAO 


zx*mo 


(15) The X, Y, and Z on the fourth line clearly belong in sequence. 


RHUGA 
Vv cTo 
B EFK 
Ss XYZ 

NPQ 
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(16) The partially reconstructed matrix can now be used to add substantially more 
P y y 
plaintext in the message. 


DT BY 


ou te 
CA CF 


b at ta li on x et ef a re af ro 
VF GO OG MV_CQ IH NS MN VI FC IK FK NX KH UB GK AV LH 


xt il f ef ou rt hr es to on b at 
we YC IA VM PB CI FK CA GV UH NC BX OV LY NU CQ ED GO 


ion to rea ac es to r ba tx ta li 


OG _MV_CQ VW OV UB CH CM CM CW UO BX OV YG DH HB KR CY OG MV 


x x a at ta ck at ze ro ve ze ro ze ro st 
NS NS QR EX IU GO OG OE GO XK AV DT CB XK AV XK AV YV 


t x ery ep ar at o i} eg at ze ro fo 
OC NS NB GS LG FN RH GO CV MX VM SL FU CM CO XK _AV KT 


ur ve st op 
GH DT_CB YV_ TQ 


(17) DT CB is a FIVE. The word on line five, after op=TQ is AR TI LX LE 
RY. The second row includes the numbers -F [V EF OU RT HR EX E-. These 
additions are placed in the matrix. 


(18) The missing M and W are easily placed reves The rows are placed in 


correct order by shifting the last row to the top and placing the remaining rows 


alphabetically. The keyword is VICTOR HUGO. 


(19) To solve Playfair systems like this, it is important to remember to try all 


possibilities and to keep the work as simple as possible. It is very easy to 
overlook possible arrangements, so work very carefully. Always look for the 
digraph pairs with the least possibilities to plot to keep the work from getting 
el complex. If the square appears to be alphabetical in construction, use the 
alphabeticity to help you put rows and columns in the correct order whenever 
you can. 


PART FOUR 


Polyalphabetic Substitution Systems 


PERIODIC POLYALPHABETIC 
SUBSTITUTION SYSTEMS 


Section I 
Characteristics of Periodic Systems 


8-1. Types of Polyalphabetic Systems 


All the substitution systems explained up to this point are monoalphabetic systems. 
Whether they deal with one letter at a time or several, whether they have one cipher 
equivalent for each plaintext letter or more than one, they are still systems with only 
one alphabet. The constant feature that makes a system monoalphabetic is that a 
given ciphertext value always translates into the same plaintext value. In 
polyalphabetic systems, a given ciphertext value changes its plaintext meaning. 


a. Most polyalphabetic systems are monographic; they encipher a single letter at a 
time. Polygraphic polyalphabetics are possible, but have little practical military 
value. 


b. A typical polyalphabetic system will use from 2 to 26 different alphabets. 
Polyalphabetic systems which repeat the same set of alphabets over and over again 
in the same sequence are known as periodic systems. Polyalphabetic systems which 
do not keep repeating the same alphabets in the same order are known as aperiodic 
systems. Periodic systems, because of their regular repeating keys, are generally 
less secure than aperiodic systems. Aperiodic systems, on the other hand, are 
generally more difficult to use, unless the encipherment is done automatically by a 
cipher machine or computer. 


. The classic types of polyalphabetic systems use a set of alphabets, such as the 26 
alphabets pictured i Figure Bf Figure known as a Vigenere square, includes 
all possible alignments of a direct standard alphabet. Mixed alphabets can also be 
used in such a square. If all 26 alphabets are used, any letter can equal any other 
letter. There are necessarily three elements to the encryption process with 
polyalphabetic ciphers, which the square and the accompanying examples 
illustrate. The plaintext letters are listed across the top of the square. The cipher 
equivalents are found in the 26 sequences below. The final element is the key that 
designates which alphabet is used at any given time. The key letter is found on the 
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left side of the square. The first example in Figure 8-1 shows the use of a repeating 
key based on a keyword. Since the same key is repeated over and over again, the 
resulting system is periodic. The second example uses a nonrepeating key based on 
a quotation. Since this key does not repeat, it is an aperiodic system. Note that the 
reuse of the same alphabets does not constitute a repeating key. For the system to 
be classified as periodic, the same alphabets must be reused over and over again in 
the same sequence. 


Plaintext 


relay 


V G 
rafvtelxly zine elo | 
afviepely|2 alate pele lal] 
1 [3 | 
3k [L 


vf] x[y]z[a |e [c [o fe fe] fa] 
w{x] yz [a] [c [o fe Jr [fe |r [3 [x ft 
[y[z fale |c Jo fe |r fc fei] [2 fx fe [a 
[z[a[e [cD Je Ir fc jet] 3 jx ft [MIN 
Ale {ctole Fr fc flr fat ba fo) 


Key 


zal alka ad = 


o eel 


jo [=[alalaim [ofa 


Foie aiken ole eke] 
jc] [3 [c(h wi 


PERIODIC 


Plain: repor tatze rotwo twoze rotom orrow 
Key: RIFLE RIFLE RIFLE RIFLE RIFLE RIFLE 
Cipher: IMUZV KIYKI IWYHS KETKI IWYZQ FZWZA 


APERIODIC 
Plain: mount ainpa ssesb locke dbyhe avysn owfal Ilast night 
Key: FOURS COREA NDSEV ENYEA RSAGO OURFO REFAT HERSB ROUGH 
Cipher: RCOEL CWETA FVWWW PBAOE UTYNS OPPXB FAKAE SPRKU EWANA 


Figure 8-1. Use of Vigenere square. 


d. 


AK—~0 


Another way to picture the same system as the first example in|Figure 8-1 is shown 
below. In this case, instead of using the complete alphabet square, only the 
alphabets actually used are shown. These alphabets are used repeatedly to produce 
the same results. In this example, the key is expressed in terms of the number of 
the cipher sequence used, instead of by the repeating key letters. 


p: abcdefghijkIimnopaqarstuvwxyz 
Cl: RSTUVWXYZABCDEFGHIJKLMNOPQ 
C2: TIKLMNOPQRSTUVWXYZABCDEFGH 
C3: FGHIIJIKLMNOPQRSTUVWXYZABCODE 
C4: LMNOPQRSTUVWXYZABCDEFGHIIK 
C5: EFGHIIJKLMNOPQRSTUVWXYZABCD 


Plaintext! repor tatze rotwo twoze rotom orrow 
Key: 12345 12345 12345 12345 12345 12345 
Ciphertext: IMUZV KIYKI IWYHS KETKI IWYZQ FZWZA 


. Another type of polyalphabetic system does not use multiple alphabets in the 


classic sense, but instead enciphersa message in a single alphabet. Then it applies 
either a repeating key or nonrepeating key to the first encipherment to create a 
polyalphabetic. One method of applying a polyalphabetic key to a monoalphabetic 
encipherment is to use a numeric system and arithmetical y add a key to it. For 
example, here is a dinomic system, which has been further enciphered by a 
repeating numeric additive. The first encipherment is labeled I, for intermediate 
Se and the second encipherment is lab he 8-digit repeating key is 
a 


ADEE 
eled K. Modulo 10 arithmetic is used (paragraph 5-3f(1)). 


0123456789 


— 


at ta ck at z2eroni one hu ndere ds 

3892 9238 6168 3892 9563 3290 6966 6963 3431 6962 3263 6296 
4209 9336 4209 9336 4209 9336 4209 9336 4209 9336 4209 9336 
709! 8564 0367 2128 3762 2526 0165 5299 7630 5298 7462 5522 


f. Another approach to applying a polyalphabetic key begins with the built-in 


encoding system used by teleprinters or computers. Paragraph 8-2 shows examples 
of these. 


8-2. Machine Based Polyalphabetics 


When text is sent electronically by radio or wire, some form of coding must be used. 
The earliest system of coding for electronic transmission was Morse code, which is still 
used widely today. When teleprinters took their place in communications, a new 
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binary type of coding system was devised, which can be handled by machine more 
easily than Morse code can. at binary coding system uses only two characters, which 
can be represented electronically as a signal pulse or no signal pulse, high voltage or 
low voltage, or one frequency or another frequency. Which of these approaches is used 
depends on the equipment in use and is not our concern here. We are concerned with 
how the two binary characters, whatever their electronic origin, are combined to repre- 
sent alphabetic, numeric, and special characters, and how they may further be en- 
Soa Various notations have been used to represent the two binary characters—Xs 
and 0s, 1s and 0s, +s and -s, or Ms (for marks) and Ss (for spaces). We will use 1s and 
Os in this text, but you should be aware that you may see other notations elsewhere, 
particularly in older literature. 


a. The Baudot Code. Teleprinter systems generally use a 5-digit binary code known 
originally as the Baudot code. There are 32 possible combinations of 5 digits, which 
are not enough for the letters, numbers, and printer control characters needed for 
communications. The number of possible characters is approximately doubled by 
the use of upper and lower shift characters, similar to the shift key on a typewriter, 
giving all characters two alternate meanings except the shift characters themselves 
and the space character. There are still not enough characters for upper and lower 
case letters, so all traffic passed by such teleprinter systems use capital letters only. 
The standard international teleprinter code 1s shown in Figure 8-2. Each dot repre- 
sents a 1 and each space represents a 0). Other codes are also used besides the one 
shown. 


N1e [@l 9/9] 1] 41a] 5] 7 [ol2[/[el+]-1¢ TEI 
als |7|5[2t7 [6 


WEATHER SYMBOLS 
CASE | Bade 
IM OOUURGHEE 
| jejeje; | | 
a 


LOWER CASE 


[+13] 
$13] 
EE 
OO 
an 
| | 
Om 
ne 


BOOSOUBFE 
OOSOS EO 


Figure 8-2. International teleprinter code. 


The binary digits themselves are known as bauds—a term derived from the Baudot 
code. The terminology has carried over into modern computer. systems as well. 
Polyalphabetic keys, also in 5-digit binary form, are easily applied to coded text 


electronically by baud addition. An example of this process is shown below. 
Although other rules are also possible, the addition of key and plaintext bauds is 
usually accomplished by the rule, Like values sum to 0; unlikes sum to 1. (In com- 
puter logic, this would be called an exclusive OR, or XOR operation.) 


Plaintext: e n e m y 

Bauded plain: 10000 00110 10000 00111 10101 

Key: 01010 11010 10100 01110 10110 

Bauded cipher: 11010 11100 00100 01001 00011 
Ciphertext: J U (space) L Oo 


One advantage of this rule of addition is that adding the same key to the ciphertext 
produces the plaintext again. 


b. Computer Codes. Communications between computers use more than 5 digits. 
pie computer codes use either 7- or 8-binary digits (bits), giving a range of 
128 characters or 256 characters. These permit upper and lower case letters, a full 
range of punctuation marks and special characters, and a number of codes to con- 
trol a and communications devices as well. With the 8-bit, 256 character set, 
graphics may also be enabled to permit transmitting pictures as well as text. The 
most common standard for the first 128 characters, whether 7-bit or 8-bit, is the 
American standard code for information interchange (ASCII) standard, which you 
can find in many computer manuals. Encipherment and decipherment can be 
accomplished in 7- and 8-bit operation just as was shown for 5-digit teleprinter 
operations. The more complex systems are far beyond the scope of this manual, but 
simple aeons key systems can be solved using the techniques discussed here. 
One problem that computer codes present is that less than half of the possible 7-bit 
characters are letters and numbers, and many of them stand for printer control 
codes that do not print out as characters normally. Working with binary numbers 
themselves is unwieldy, but any 7- or 8-bit value can be represented by two hex- 
adecimal (base 16) arithmetic digits. Hexadecimal arithmetic is not explained 
here, but explanations are available in many computer manuals and texts, if 
needed. Hexadecimal and binary numbers are also explained in Army Correspon- 
dence Course Program Subcourse SA0709. 


Section II 


Identifying Periodic Systems 


8-3. Analysis of Repeated Ciphertext 


eae systems normally have very flat frequency counts. The phi IC is 
normally close to the random expectation of 1.00. Since other systems, including 
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variant multiliterals and aperiodic systems, also can produce flat frequency counts, 
this is not enough to identify a system as jens The key to identifying a system as 
periodic is to recognize through repeated ciphertext that a repeating key is used. 


a. Repeated ciphertext can occur in two ways. Whenever the same plaintext is 
enciphered by the same keys, the ciphertext will also repeat. Such repeats are 
called causal repeats. The second way that ciphertext can repeat is by pure chance. 
Different plaintext enciphered with different keys will sometimes produce short 
ciphertext repeats. Causal repeats are much more likely to occur than accidental 


repeats, particularly if they are longer than two or three characters. The example 
below, repeated fro shows how causal repeats occur. 


Plaintext: repor tatze rotwo twoze rotom orrow 
Key: 12345 12345 12345 12345 12345 12345 
Ciphertext: IMUZV KIYKI_EWYHS KETKI_ IWYZQ FZWZA 


The plaintext words ZERO and TWO both occur twice. The repeated ZEROs lined 
up with the same alphabets, producing a ciphertext repeat. The repeated TWOs 
lined up with different alphabets and did not produce a ciphertext repeat. 


b. Whenever causal repeats occur, the distance between them must be a multiple of 
the period length. In the example above, the two ZEROs occurred 10 letters apart. 
Note that the distances are counted from the first letter of one repeat to, but not in- 
cluding, the first letter of the second repeat. If the distance was not a multiple of the 
period five, the ciphertext repeat would not have occurred. 


c. The distance between causal repeats is a multiple of the period length. Given a 
cryptogram of unknown period that includes ciphertext repeats, the period can be 
determined, or at least narrowed down, by wa a the distances between repeats. 
The period must be a factor of the distance. The factors of a number are all the 
numbers which divide evenly into that number. When there is more than one 
repeat, the period must be a common factor of all such distances. For example, if a 
cryptogram has repeats that are 28, 35, and 42 letters apart, the only number that 
evenly divides all the fiend must be 7. Utility tables showing 


common factor numbers are in| Appendix E| 


d. Here is a more complex example. Suppose a cryptogram suspected of being periodic 
includes the following repeats. 


Repeat Distance 
GXKLRYPDL 84 
ZBHHNS T 90 
XTVTB 36 
SRM 35 


The next step after determining the distances is to list the factors for each repeat, as 
shown below. 


Factors 


Distance 


Repeat 
GXKLRYPDL 


ZBHHNST 6, 9, 10 
XYVTN 6, 9, 12 
SRM 7 


No numbers evenly divide the distances between all the repeats. In such cases, 
either the system was not a periodic system, or one or more of the repeats is 
accidental. In this problem, the SRM repeat is probably accidental, because it is 
the shortest. Discarding the SRM repeat from consideration, the remaining repeats 
all have common factors of 2, 3, and 6. Where more than one factor is possible, it is 
generally safest to assume the largest. If the period is ele 3, for example, it will 
reveal itself by repeated alphabets as the cryptogram is solved. 


8-4. Analysis by Frequency Counts 


Periodic systems can be identified even when there are no repeated words in the text. 
Causal single-letter ciphertext repeats will still occur and significantly outnumber the 
accidental single-letter repeats. 


a. To find the causal single-letter repeats, take frequency counts for each alphabet 
according to its position in the suspected repeating cycle. If the period is incorrect, 
the separate frequency counts will remain flat. If the period is correct, the separate 
frequency counts will be as rough as plaintext on the average. Recognizing when a 
count is rough or flat is difficult by eye, particularly with anything but very long 
cryptograms, but the phi test performed on each separate alphabet gives a reliable 
indication. Taking separate frequency counts by position for each suspected period 
and then calculating phi tests on each is a laborious and time-consuming process by 
hand. It can be done when necessary, but it is best performed by computer support. 


Figures 8-3} 8-4] and 8-5/show computer generated output for suspected periods of 6, 
, and 8 for the 


following cryptogram. 


LPADW GUGHG ETZHV KSRQS ACNPJ GHTHH QCKGS CHHRB HMDIH HMCIJM 
EXEVH LVPQS OCHPK MZYBZ SMMPF TLBGF KRAEA FBMHQ IXSZC PGAQT 
KPLPS GXIVX BGFRI TSTGF SPYNS SNTAL SIOSC MJRMI ZSICF RQTUV 
HLVPQ SOCHP KQFDW SFRAK MILRG GECAU HFEGN YXXZO GLGMZ DUHUC 
XGRIL SARZQ FDWBB PSRUD UGJGD JNTWF BTABQ SVBGF WRDPP BFRGN 


A B CDE F GHIJKL MNO P QR S TUVW 
O11 11 8 6 13 20 179579 11 6 4 14 10 13:19 1077 5 


NX 


I YZ 
10 11 1 13 20 17 9 1 14 10 13 19 1 3 8 


TOTAL LETTERS = 250 MONOGRAPHIC IC = 1.098474 
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b. The average ICs for each period in Figure 8-3 and|8-4Jare flat, The average IC for a 
period of 8 in Figure 8-5is much higher than the other two. This clearly shows that 


the period o 


8 is more likely correct than periods of 6 and 7. 


c. The computer program used to generate these examples is listed ir Appendix F| It is 
written in GW BASIC, and is readily adaptable to many different computers. 


PERIOD = 6: 


2001044 4% 
TOTAL LETTERS = 42 


ABCDEFGH 
104204644 2 


TOTAL LETTERS = 42 
ABCDEFGH 


641231150 


TOTAL LETTERS = 42 


ABCDEFGH 
03230061 


TOTAL LETTERS = 42 


ABCDEFGH 
3110223 3 


TOTAL LETTERS = 41 


ABCDEFGH 
03301222 


TOTAL LETTERS = 41 


IC = 1.570267 


MNOPQR 
130121 
IC = 1.014634 
MNOPOR 
300435 
IC = 1.236585 


Figure 8-3. Frequencies, period 6. 


PERIOD = 7: 


22221341 
TOTAL LETTERS = 36 


ABCDEFGH 
1o1l12434 


TOTAL LETTERS = 36 
ABCDEFGH 


22 1° 2,.0- 1 243 


TOTAL LETTERS = 36 


ABCDEFGH 
21312022 


TOTAL LETTERS = 36 
ABCDEFGH 


020102220 


TOTAL LETTERS = 36 


ABCDEFGH 
1220024 4&4 


TOTAL LETTERS = 35 
ABCDEFGH 


220111422 


TOTAL LETTERS = 35 


Figure 8-4. Frequencies, period 7. 


IC = .9176471 
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PERIOD = 8: 


ABCDEFGH 
3001123 3 


TOTAL LETTERS = 32 
ABCDEFGH 
11100050 
TOTAL LETTERS = 32 
ABCDEFGH 
30022301 
TOTAL LETTERS = 31 
ABCDEFGH 
00151000 
TOTAL LETTERS = 31 
ABCDEFGH 
2100100 4 
TOTAL LETTERS = 31 
ABCDEFGH 
0430032 5 
TOTAL LETTERS = 31 
ABCDEFGH 
1420125 4 
TOTAL LETTERS = 31 
ABCDEFGH 
01400350 
TOTAL LETTERS = 31 


MNOPQR 
110000 


IC = 1.362903 
MNOPQR 
410537 
IC = 2.620968 

MNOPQR 
210061 
IC = 1.565592 

MNOPQR 
010100 
IC = 3.075269 


IC = 1.956989 


MNOPQR 
120011 
IC = 1.453764 
MNOPQR 
300603 
IC = 2.460215 


Figure 8-5. Frequencies, period 8. 


SOLUTION OF PERIODIC 
POLYALPHABETIC SYSTEMS 


Section | 


Systems Using Standard Cipher Alphabets 


9-1. Approaches to Solution 


When standard alphabets are used with monoalphabetic systems, three approaches 
are possible. The simplest occurs when text can be immediately identified. Identifica- 
tion of only two or three letters in a standard unilateral alphabet is sufficient to 
reconstruct and confirm the entire alphabet. The other two methods, where text is not 
readily identifiable, are to match frequency patterns to the normal A through Z pat- 
tern and to generate all possible solutions. All three of these methods also apply to 
standard alphabet periodic polyalphabetics. 


9-2. Solution by Probable Word Method 


When the alphabets in a periodic system are known or suspected to be standard, the 
identification of one plaintext word is usually enough to recover the whole system. The 
period must be identified first, as explained in hres chat either by analysis 
of repeat intervals or by the phi test. Then when a word is recognized from repeats or 


stereotypes, the alphabets can be written and tried throughout the cryptogram. If they 
produce good plaintext throughout, the problem is solved. 


CHAPTER 9 
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EITYMB EKVWO YBTOE ILMFK CRRAK WJWBZ ELUYO NZUZF ZNTIH YMZXT 
IMSWG WRRPC HFGNV ZQALN QCNGJ VBFSQ RVFPO ENISI CIMHJ SJDBT 
ALSDI CSOGH ZYAWW JCEQE MRCFY KIIXC SERRE RGZPB RMJDC_IMRHZ 
SFZXT TWQHW YHVAG UYDUS QPGJD_BTSGZ JYAGK KARXQ MJE 


Repeats Distance Factors 


Factor analysis does not show us a clearcut period length, but if we select the four 
letter repeat as the most likely causal repeat, 7 appears to be the correct period. If we 
also try STOP as the four letter repeat, it gives us the following text and alphabets. 


re nais cere t sen smov he av idge ing 
EIYMB EKVWO YBTOE ILMFK CRRAK WJWBZ ELUYO NZUZF ZNTIH YMZXT 


e p men owar ud dy erso ofb a r svi stop 
IMSWG WRRPC HFGNV ZQALN QCNGJ VBFSQ RVFPO ENISI CIMHJ SJDBT 


my po ions ngr i h ave nhea yr ei rced 
ALSDI CSOGH ZYAWW JCEQE MRCFY KIIXC SERRE RGZPB RMJDC_ IMRHZ 


p f our htho st sonc and i 
SFZXt TWQHW YHVAG UYDUS QPGID BT BTSGZ JYAGK KARXQ MJE 


p: abcdefghijkimnopqrstuvwxyz 
C1: NOPQRSTUVWXYZABCDEFGHIJIKLM 
C2: EFGHIIJIKLMNOPQRSTUVWXYZABCOD 


C6: RSTUVWXYZABCDEFGHIJKLMNOPQ0 
C7: KLMNOPQRSTUVWXYZABCDEFGHI4I 


From the partial plaintext that this ee STOP is clearly correct. Such words as 
RECONNAISSANCE, HEAVY, and REINFORCED are apparent, any one of which 
will complete the solution. For another type of probable word approach, applicable to 


periodics or aperiodic, seq paragraph 10-3c\on crib dragging. 


9-3. Solution by Frequency Matching 


With monoalphabetic systems using standard alphabets, the solution was very easy 
whenever a message was long aa to give a recognizable pattern. The characteristic 
pattern of highs and lows of a standard sequence cannot be easily concealed. The same 
technique applies to polyalphabetic systems, although Seek necessarily must be 
longer to produce a recognizable pattern for each separate alphabet. 


FNPDM GJRMF_FTFFZ IQKTC LGHAS EOSIM PVLZF LJEWU WIEAH EOZUA 
NBHNJ SXFFT JNRGR KOEXP GZSEY XHNFS EZAGU EORHZ XOMRH ZBLTF 
BYQDT DAKEI LKSIP UYKSX BTERQ QTWPI SAOSF TQKTS QLZVE EYVAE 
JSNFB IFNEI OZINR RFSPR TEHNJ ROJSI UOCZB GOPLI STUAE KSSQT 
EFXUJ NFGKO UHLZF HPRYV TUSCP JDISE BLSYU IXDSJ JAEVF KINOF 


a. Factor analysisshows common factors of three and six for all repeat intervals. 
Based, on this, a frequency count for six alphabets is produced, as listed in 
Figure 9-1. If the pate were actually three, the first and fourth, the second and 
fifth, and the third and sixth frequency counts would be similar. This is clearly not 
the case, so the period is confirmed as six. 


02003500 

TOTAL LETTERS = 44 
ABCDEFGHI 
402271012 
TOTAL LETTERS = 44 


ABCDEFGHI 
011062010 


TOTAL LETTERS = 43 


ABCDEFGHI 
0:1033630 48% 


TOTAL LETTERS = 43 


ABCDEFGH I 
330107171 


TOTAL LETTERS = 43 


ABCDEFGHI1 
20001031 4 


TOTAL LETTERS = 43 


Figure 9-1. Periodic frequencies. 
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b. The easiest patterns to match are generally those with the highest ICs. The first, 
second, and fifth alphabets have the highest ICs, and all can be matched fairly 
easily. In the first, plaintext A equals ciphertext B. In the second, plaintext A 
equals ciphertext A, and in the fifth, plaintext A equals ciphertext O. Other 
alphabets can be matched, too, but using these as an example, the partially 


reconstructed text is shown below. 


en y ir r ef e sc ter 
FNPDM GJRMF FTFFZ IQKTC LGHAS 


t is r in d ne s re 
NBHNJ SXFFT JNRGR KOEXP GZSEY 


n pd mdi eou e atoc 
BYQDT DAKEI LKSIP UYKSX BTERQ 


is nen ain ror t i 
ISNFB IFNEI OZJINR RFSPR TEHNI 


jin w th er or fore 
EFXUJ NFGKO UHLZF HPRYV TUSCP 


roem t pd 
FIFMP EHYQD 


e u ov sr ie i da a ta 
EOSIM PVLZF LJEWJ WIEAH EOZUA 


t es mte t wo t al 
XHNFS EZAGU EORHZ XOMRH ZBLTF 


sw eons c ss l1deom 
QTWPI SAOSF TQKTS QLZVE EYVAE 


re to n pp eta ept 
ROJSI UOCZB GOPLI STUAE KSSQT 


pre eti oe ia r in 
JDISE BLSYU IXDSJ JAEVF KINOF 


c. The letter combinations produced by the three recovered alphabets are consistent 
with good plaintext. Expanded plaintext can be recognized in many places. The 
first word is ENEMY for example. Filling in added plaintext is a surer and quicker 
means of completing the solution at this point than trying to match more alphabets. 


Here is the complete solution. 


enemy airbo rnefo rcese aptur 
FNPDM GJRMF FTFF2Z IQKTC LGHAS 


ckthi smorn ingpd enemy stren 
NBHNJ SXFFT JNRGR KOEXP GZSEY 


nspdi mmedi ateco unter attac 
BYQDT DAKEI LKSIP UYKSX BTERQ 


iscon centr ating armor inthi 
JSNFB IFNEI OZJNR RFSPR TEHNJ 
tojoi nupwi thair borne force 
EFXUJ NFGKO UHLZF HPRYV TUSCP 


rceme ntspd 
FIFMP EHYQD 


edbug ovair field indaw natta 
EOSIM PVLZF LJEWU WIEAH EOZUA 


gthes timat edatt wobat talio 
XHNFS EZAGU EORHZ XOMRH ZBLTF 
kswer eunsu ccess fulpd enemy 
QTWP!I SAOSF TQKTS QLZVE EYVAE 


rdsec torin appar entat tempt 
ROJSI UOCZB GQPLI STUAE KSSQT 


spdre quest immed iater einfo 
JDISE BLSYU IXDSJ JAEVF KIJNQF 


P> abcdefghijkimnopgqrstuvwxrxyz 
C1: BCDEFGHIIJIKLMNOPQRSTUVWXYZA 
C2: ABCDEFGHIIJKLMNOPQRS TUVWXYZ 
C3 LMNOPQRSTUVWXYZABCDEFGHIJK 
C4: RSTUVWXYZABCDEFGHIIJIJKLMNOPQ0 
Cs OPQRSTUVWXYZABCDEFGHIIJIKLMN 
ce GHIIJKLMNOPQRSTUVWXYZABCODEF 


9-4. Solution by the Generatrix Method 


With standard alphabets or any known alphabets, the method of completing the plain 
component can be used. This method, when ne to periodic systems, is commonly 
called the generatrix method. The advantage of this method over frequency matching 
is that it wilLwork even wi re short cryptograms. Just as with a monoalphabetic 
system (seq paragraph 4-11), the first step is a trial decryption at any alphabet align- 
ment, followed by listing the plain component sequence vertically underneath each 
letter of the trial decryption. Whenever the plain and cipher sequences are identical 
and in the same direction, no trial decryption is necessary. The key difference with 
periodic systems is that the ce must be applied to the letters of each alphabet 
separately. Plaintext will not be immediately obvious when you look at the generated 
lines of letters from only a single alphabet, so selection must be initially based on letter 
frequencies and probabilities rather than recognizable text. The process is illustrated 
with the following cryptogram enciphered with direct standard alphabets. 


QNMZC TAAED FASRR TITYI UGPGW QVMAX TRMRM ZHMNZ KFQEI RIOUX 


XAAGR UGPG 


a. The cryptogram has a period of five, which can be confirmed either through 
periodic-phi tests or factor analysis of all the repeats, including two letter repeats, 
which are not underlined. 


b. The most obvious step to try is to substitute STOP for the four letter repeat. It does 
not produce plaintext elsewhere, however. More powerful methods of solution are 
required. 


c. The cryptogram can be readily solved by the generatrix method. The first step is to 
separate the letters produced by each alphabet. The letters from each of the five 
alphabets are listed separately below. Notice that if you read all the first letters, it 
produces the first group of the cryptogram. The second letters produce the second 
group and so on. 


QTFTUQTZKRXU NAAIGVRHFIAG MASTPMMMQOAP ZERYGARNEUGG CDRIWXMZIXR 


d. No trial decryption is required, because the same sequence is expected for both the 
plain and cipher components. Therefore, the next step is to complete the plain com- 
ponent sequence for each letter grouping. This is illustrated in Figure 9-2. 
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QTFTUQTZKRXU 
2969629028 36 
RUGUVRUALSYV 
865658687865 
SVHVWSVBMTZW 
857558546905 
TWIWXTWCNUAX 
958539578683 
UXIXYUXDOVBY 
631366378546 
VYKYZVYEPWCZ 
562605696570 
WZLZAWZFQXDA 
507085062378 
XAMABXAGRYEB 
386843858694 
YBNBCYBHS ZFC 
648476478067 
ZCOCDZCITAGD 
078770789857 
ADPDEADJUBHE 
876798716479 
BEQEFBEKVCIF 
492964925786 
CFRFGCFLWDIJG 
768657675715 
DGSGHDGMXEKH 
758577563927 
EHTHIEHNYFL 1 
979789786678 
FIULJF10ZGMJ 
686816880561 
GJVIJKGJPAHNK 
515125168782 
HKWKLHKQBIOL 
725277224887 
1LXLMILRCIJPM 
873768787166 
JMYMNIMSDKQN 
166681687228 
KNZNOKNTELRO 
280882899788 
LOAOPLOUFMS P 
788867866686 
MPBPQMPVGNTQ 
664626655892 
NCC! 

827288257868 
ORDRSORXIPVS 
887888838658 


PSESTPSYJQWT 
689896861259 


62 


78 


67 


76 


58 


57 


51 


72 


67 


73 


79 


71 


70 


71 


91 


63 


31 


61 


74 


61 


77 


84 


65 


71 


85 


77 


NAA IGVRHF IAG 
888855876885 
OBBIHWS IGJBH 
844175835147 
PCCKIXTJHKCI 
677283917278 
QDDLIYUKILDI 
277716628771 
REEMKZVL IMEK 
399620571692 
SFFNLAWMKNFL 
866878562867 
TGGOMBXNLOGM 
955864387856 
UHHPNCYOMPHN 
677687686678 
VI IQODZPNQIO 
588287068288 
WJ IRPEAQORIP 
511869828816 
XKKSQFBRPSKQ 
322826486822 
YLLTRGCSQTLR 
677985782978 
ZMMUSHDTRUMS 
066687798668 
ANNVT IEUSVNT 
888598968589 
BOOWUJFVTWOU 
488561659586 
CPPXVKGWUXPV 
766352556365 
DQOQYWLHXVYQW 
722657735625 
ERRZXMI YWZRX 
988036865083 
FSSAYNJZXASY 
688868102886 
GTTBZOKAYBTZ 
599408286490 
HUUCAPLBZCUA 
766786740768 
IVVDBQMCADVB 
855742678754 
JWWECRNDBEWC 
155978874957 
KXXFDSOECFXD 
233678897637 
LYYGETPFDGYE 
766599667569 


MZZHFUQGEHZF 
600766259706 


MAST PMVUMQOAP 
688966662886 


NBTUQNNNRPBQ 
849628888642 
OCUVROOOSQCR 
876588888278 
PDVWSPPPTRDS 
675586669878 
QEWXTQQQUSET 
295392226899 
RFXYURRRVTFU 
863668885966 
SGYZVSSSWUGV 
856058885655 
THZAWTTTXVHW 
970859993575 
ULABXUUUYWIX 
688436666583 
VIBCYVVVZXJY 
514765550316 
WKCDZWWWAYKZ 
527705558620 
XLDEAXXXBZLA 
377983334078 
YMEFBYYYCAMB 
669646667864 
ZNFGCZZZDBNC 
086570007487 
AOGHDAAAECOD 
885778889787 
BPH1IEBBBFDPE 
467894446769 
CQI IFCCCGEQF 
728167775926 
DRIKGDDDHFRG 
781257777685 
ESKLHEEE IGSH 
982779998587 
FTLMIFFFJHTI 
697686661798 
GUMNIGGGKI1UI 
566815552861 
HVNOKHHHL J VK 
758827777152 
TWOPL IT IMKWL 
858678886257 
IXPQMI J INLXM 
136261118736 
KYQRNKKKOMYN 
262882228668 


LZRSOLLLPNZO 
708887776808 


79 


73 


83 


81 


66 


79 


69 


76 


69 


48 


52 


62 


74 


52 


90 


74 


67 


70 


79 


58 


66 


78 


45 


60 


74 


ZERYGARNEUGG 
098658889655 
AFSZHBSOFVHH 
868074886577 
BGTAICTPGWI I 
459887965588 
CHUB IJDUQHXI3 
776417627311 
DIVCKEVRIYKK 
785729588622 
EJWDLFWSIZLL 
915776581077 
FKXEMGXTKAMM 
623965392866 
GLYFNHYULBNN 
576687667488 
HMZGOIZVMCOO 
760588056788 
INAHPJAWNDPP 
888761858766 
JOB 1QKBXOEQQ 
184822438922 
KPCIRLCYPFRR 
267187766688 
LQDKSMDZQGSS 
727286702588 
MRELTNEARHTT 
689798988799 
NSFMUOFBS I UU 
886668648866 
OTGNVPGCTIVV 
895856579155 
P 

667852776255 
QVIPXRIEVLXX 
258638895733 
RWJQYS JFWMYY 
851268165666 
SXKRZTKGXNZZ 
832809253800 
TYL SAULHYOAA 
967886776888 
UZMTBYMI ZPBB 
606945680644 
VANUCWNIJAQCC 
588675818277 
WBOVDXOKBRDD 
548573824877 
XCPWEYPLCSEE 
376596677899 


YDOQXF ZQVUDTFF 
672360267966 


Figure 9-2. Generatrix method. 


CIRIWXMZIXR 
78885360838 
D3SIXYNAJYS 
71813688168 
EKTKYZOBK2ZT 
92926084209 
FLULZAPCLAU 
67670867786 
GMVMABQDMBV 
56568427645 
HNWNBCRENCW 
78584789875 
TOXOCDSFODX 
88387786873 
JPYPDETGPEY 
16667995696 
KQZQEFUHQFZ 
22029667260 
LRARFGVIRGA 
78886558858 
MSBSGHWJ SHB 
68485751874 
NTCTHIXKTIC 
89797832987 
OUDUIJYLUID 
86768167617 
PVEVIKZMVKE 
65951206529 
QWFWKLANWLF 
25652788576 
RXGXLMBOXMG 
83537648365 
SYHYMNCPYNH 
86766876687 
TZIZNODQZO1 
90808872088 
UAJAOPERAPJ 
68188698861 
VBKBPQF SBQK 
54246268422 
WCLCQRGTCRL 
57772859787 
XDMDRSHUDSM 
37678876786 
YENESTIVETN 
69898985998 
ZFOFTUJWFUO 
06869615668 
AGPGUVKXGVP 
85656523556 
BHOHVWL YHWO 
47275576752 


e. To aid in selection of the most likely generated letter sequences, numeric 
probability data has been added to each line of the listing. The numbers listed 
below each letter are assigned on the basis of logarithmic weights of the letter 
probabilities. To the right of each aa of logarithmic weights is the sum of the 
bras for that group. Using this kind of ee lets us determine the relative 


probabilities of each line by adding the weights for each letter. The weights in 
Figure 9-2 |have been added according to the log weights shown in Table 9-1. 


Table 9-1. Logarithmic weights of letter probabilities. 


Letter: ABCDEFGHIJIJKLMNOPQRSTUVWXYZ 


Log weight} 8 4 7796578127688 62889655360 


f. The listing in Figure 9-2}was ey dyes generated. When this work must be done 


manually, it is easier to generate the sequences without the probability data. Then 
scan the generated rows for each alphabet to visually select those with the most high 
frequency letters. Finally, if necessary, the probability data can be added only tor 
the selected rows. 


g. Only rarely will the correct rows consist entirely of those with the highest totals. 
Normally, you will have to try different combinations of the high probability rows 
until you find the correct match. The best place to start is with those rows that 
stand out the most from others in the same alphabet groups. In the illustrated 
problem shown below, alphabets four and five provide the most likely starting 
point. In each case, the sum of the log weights for one row are well above any others. 
These are listed below, superimposed above each other with room for the other three 
alphabets to be added. 


i 
Zi 
a 
4: MRELTNEARHTT 97 
5: YENESTIVETN 88 


h. As the rows are superimposed, the plaintext will appear vertically. The next step is 
to see which high probability rows from other alphabets will fit well with the 
starting pair. Trying both of the two highest probability rows for alphabet three 
produces the next two possibilities. 


: MRELTNEARHTT 97 MRELTNEARHTT 97 


1 
2 
3: AOGHDAAAECOD 90 ESKLHEEEIGSH 88 
4 
5: YENESTIVETN 88 YENESTIVETN 83 


i. Reading the plaintext vertically, the grouping on the right is better than the one on 
the left. The DTS sequence in the left grouping is nnlikely, and all the letter com- 
binations on the right are acceptable. Furthermore, the EMY combination at the 
beginning of the right grouping suggests ENEMY. The letter sequences for the first 
two alphabets which begin with E and N respectively are both high probability 
sequences. The complete solution is shown below. 


1: EHTHIEHNYFLI 91 
NAA IGVRHF IAG 84 
ESKLHEEE I GSH 88 
MRELTNEARHTT 97 
YENEST I VETN 88 


Gin oe ON 


“ENEMY HAS RETAKEN HILL EIGHT SEVEN THREE IN HEAVY 
FIREFIGHT LAST NIGHT” 


Section II 


Systems Using Mixed Alphabets 
With Known Sequences 


9-5. Approaches to Solution 


When mixed sequences are used in periodic systems, a variety of different techniques 
can be used to solve them. When the plain and cipher sequences are known, the same 
techniques used with standard alphabets can be used, adapted to the known 
sequences. When one or both of the sequences are unknown, new techniques must be 
used. Each situation is a little different. The major paragraphs of this section deal with 
each situation: both sequences are known, the ciphertext sequence is known, or the 

laintext sequence is known. Techniques for solving periodics when neither sequence is 

own are covered in the next section. 


9-6. Solving Periodics With Known Mixed 
Sequences 


Exactly the same techniques that were used with standard alphabets can be used with 
any known mixed sequences. 


a. Successful assumption of plaintext allows you to directly reconstruct the cipher 
alphabets, as before. 


b. The generatrix method works, making sure that a trial decryption is first performed 
with the sequences set at any alignment. All possible letter combinations are then 
generated by completing the plain component sequence, as before. The key points 
to remember are to perform the trial decryption and to use the plain component as 
the generatrix sequence, not a standard sequence. 


c. Frequency matching also works, but there are some differences in its application. 
Frequency counts must be arranged in the cipher sequence order, not in standard 
order. The pattern that the frequency counts are matched to must be adjusted to 
the order of the known plain a ae Rearrange the patterns of peaks and 
oa to fit the plain component. For example, shown below is the pattern for a 
standard plain sequence and the pattern that results if a keyword mixed sequence 

based on POLYALPHABETIC is used as the plain component. 


ABCD E FGHI KLMNOPQRSTUVWXY 
713413 4237-+--43883-+-869312-2 ~- 
POLY AHB ETICDFGIKMNQRSUVWXZ 
3842 73113973 442--+38+86312- - 


The new pattern resulting from the mixed plaintext sequence is just as easy to 
match frequency counts to as the more familiar standard pattern. If it should prove 
difficult to match by eye alone, there is also a statistical test, called the chi test, 
which can be used to aid the matching process. Paragraph 9-7 demonstrates the use 
of the chi test. 


9-7. Solving Periodics With Known Cipher 
Sequences 


The technique of frequency matching can be used any time the cipher sequence is 
known, whether or not the plain sequence is also known. When the plain sequence is 
known, the frequency patterns of the cipher sequences are best matched to the ex- 
ected plain pattern as explained in paragraph 9-6. When the plain sequence is un- 
own, the frequency patterns of the cipher sequences can be matched to each other. 
In either case, the key is that the known Se sequence allows the frequency count to 
be arranged in the order of the original cipher sequence. The following problem 


9-9 


9-10 


demonstrates frequency matching with a known cipher component sequence. The 
cipher component sequence in the problem in Figure 9-3 is a keyword mixed sequence 


based on NORWAY. 


MZTNK XLBTQ JVMQF WQTIX JIBIF 


OCMEF HMHBM KTDPO IZYGR NIJDHF 


IEKAD AAPID NRBUF_IYMET HDOPL WLOID AQYEF KCWDF TPFAH MAUBR 
JLLNQ FEOIH QQYUQ KCLPO GLBOX 
ORHAD KCWDF XZWXF IPWCO XHWZP 
TRKDF MRWCO HMCNH TVGUL KRK 


HCWYQ JIMVR SLSBD HTTPO FDMQF 
JJHBL_WLQVF JDKNI JMTHF TCOVZ 


KEOQUF IJTPZ FAUUP HCYRF MDMTE 


NORWAYBCDEFG 
2203200000 1 


TOTAL LETTERS = 50 


NORWAYBCDEFG 
00503107 4 3 0 


TOTAL LETTERS = 50 
NORWAYBCDEFG 
0507044120 

TOTAL LETTERS = 50 
NORWAYBCODE 

4010314 23 3 

TOTAL LETTERS = 49 IC = 1.28 
NORWAYBCODE J 
0530000051 0 
TOTAL LETTERS = 49 IC = 3.161565 


Figure 9-3. Known cipher components. 


a. Examination of the frequency patterns in Figure 9-3 shows that they do not match 
the usual standard sequence-pattern. This means that the plain component 
sequence was not a standard sequence. 


b. If the cipher sequences can be correctly matched against each other, the crypto- 
gram can then be reduced to monoalphabetic terms and solved easily. 


c|Figure 9-4 is a portion of a computer listing that matches the frequency count of the 
cipher letters of the first alphabet with the frequency count of second alphabet 
letters at every Lae alignment. The alignments are evaluated by the chi test. In 
the chi test, each pair of frequencies for an alignment is multiplied. The products o 
all the pairs are totaled to produce the chi value for that alignment 
shows the computation carried out for the first alignment. The chi test is also called 
the cross-product test. 
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: 128 


MATCH 3 


MATCH 4 : 90 


: 172 


MATCH 5 


103 


MATCH 7 : 


MATCH 8 : 88 


MATCH 9 : 64 


4. Chi test computer extract. 
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Figure 9-5. Computation of chi value. 


the fourth alphabet, the chi values 


t 


abets. For all matches 4 
e highest. Two matches are shown for the fourth alphabet, because 


the difference between the two values is not significant. Either match could be the 


correct one. 


& 
a8 
oes 
HY 
38 
LY 
U 
5 wo 
So 
oz 


d. Figure 9-6 shows the highest chi values for each match of the first alphabet with the 


MATCHING ALPHABET 1 AND ALPHABET 2 


kKmn nN 
Wome 
qaexre- 
Qou"ueo 
mono 
~omnm 
WNOQ + 
BOON 


172 


MATCH 5 : 
MATCHING ALPHABET 1 AND ALPHA 


ATCHING ALPHABET 1 AND ALPHABET 4 
0 


M 
N 
2 
E 
3 


a 
saad 
< 
oO 
z 
zr 
S) 
Ke 
< 
= 


6. Best matches. 


Figure 9 
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e. To resolve which of the two matches with the fourth alphabet is correct, the highest 
chi values for matches between the second and fourth and the third and fourth 
alphabets have also been determined. These are shown in Figure 9-7. 


MATCHING ALPHABET 1 AND ALPHABET 4 


D G 
0 
M 
0 


@rtw<o~x~ Touo 


LPH 2 AND ALPHABET 4 


> 


T 
G 
0 
Z 
1 


Cc 
7 
T 
3 


wor 


MATCH 15 : 132 
MATCHING ALPHABET 3 AND ALPHABET 4 


E F G 
o 1 1 
F GH 
0 !t 2 


Figure 9-7. Matches with the fourth alphabet. 


f. The matches of aon four with alphabets two and three clarify which of the 
matches with the first alphabet was correct. This becomes apparent when we set up 
the other four alphabets. 


>NORWAYBCDEFGHIIJTKLMPQSTUVXZ 
>AYBCDEFGHIJKLMPQSTUVXZNORW 


1 
2 
3 MPQSTUVXZNORWAYBCDEFGHIJKL 
4 
5 


>X ZNORWAYBCDEFGHIJKLMPQSTUY 


g. The match of N of the first alphabet with P of the fourth alphabetic correct. The 
second alphabet and third alphabet matches confirm this. 


9-13 
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h. The next step in the solution is to reduce the cryptogram to monoalphabetic terms 
using the matches just determined. An A through Z sequence is arbitrarily used for 
the plain component, and the message is decrypted just as if it were the original. 


abcdef ghi 
NORWAYBCDEFGHIJK 
AYBCDEFGHIJIKLMPQ0 
MPQSTUVXZNORWAYB 
PQSTUVXZNORWAYBC 
XZNORWAYBCODEFGH I 


rveir_ympdv_ otabm dpeva_okpdm 


MZTNK XLBTQ 


nfymk eabvk 
IEKAD AAPID 


mdmnv_ okafe 
HCWYQ JIMVR 


aypem_ nbarx 
NRBUF I YMET 


umdok mread 
SLSBD HTTPO 


oeyip oneum 
JDKNI JMTHF 


kafeu mdokm 
FAUUP HCYRF 


JVMOF WOTIX JIB 


jk Ilmnopgqrstuy 
LMPQST 

STUVXZ 

CDEFGH 

DEFGH I 

JK LMP Q 

bdarm mnvot prrad 

OCMEF HMHBM KTDPO 

mekas _dmkvk eporm_pdmqm 
HDOPL WLOID AQYEF KCWDF 
keabm omziv kfkvo_ tpoev 
FDMQF JLLNQ FEOIH QQYUQ 
vdkfb byvmk_pdmqm yvmgm 
TCOVZ ORHAD KCWDF XZWXF 
read] vyyqm rympd mngio 
MDMTE TRKDF MRWCO HMCNH 


wx y 
UV xX 
NOR 
IJK 
JIKL 
STU 


<=Sr<anowen 


nvote akrum 
IZYGR NIDHF 


votmo rafoe 
TPFAH MAUBR 


pdzad_Impba 
KCLPO GLBOQX 


nompd yimhu 
IPWCO XHWZP 


vtues pyy 
TVGUL KRK 


i. Reduced to monoalphabetic terms, many more repeats in the text that were sup- 
pressed yy the multiple alphabets now appear. The solution is completed the same 


as any ot 


er monoalphabetic system. 


9-8. Solving Periodics With Known Plaintext 
Sequences by Direct Symmetry 


When the plaintext sequence is known, but not the ciphertext sequence, a solution 


technique 


own as direct you is possible. Direct symmetry depends on the 


ee word method for the initial entry into the cryptogram. It makes use of the 
act that the columns can be reconstructed in their original order as recoveries are 
made. Consider the next example, which uses a standard plaintext sequence. 


MBNFQ ZLHQV ERNMS EXWFJ MBUFU 
XWHRN ACTKP EVBZJ PREZB TCZWH 
EVRWA MBIHO MBNFQ ZLHQV ERNMB 
ITUCG JBUFW ALWML KFSLL IFQRX 


LWZIA LBSMK CFXKN WSNZW TREQA 
TKTDN LBWAU PRZOQ KFEIW KBSRD 
IVZIN MVCHR MXXRD EXDFU NLWGV 
YVIHE JKAHO 


a. The period is five. The 14 letter repeat is probably RECONNAISSANCE. 


recon naiss ance ao reo 

MBNFQ ZLHQOV ERNMS EXWFJ MBUFU 
i a n 

XWHRN ACTKP EVBZJ PREZB TCZWH 


a re recon naiss ance 
EVRWA MBIHO MBNFQ ZLHQV ERNMB 


eo ae 
ITUCG JBUFW ALWML KFSLL IFQRX 


ee ¢ nis 
LWZIA LBSMK CFXKN WSNZW TREQA 

e n e 
TKTDN LBWAU PRZOQ KFEIW KBSRD 


r rc a o a 
IVZIN MVCHR MXXRD EXDFU NLWGV 


YVIHE JKAHO 


b. With recovered letters filled in, we can see that the beginning phrase is the 
stereotype, RECONNAISSANCE PATROL REPORTS. 


recon naiss ancep atrol repor 

MBNFQ ZLHQV ERNMS EXWFJ MBUFU 
si a Ion 

XWHRN ACTKP EVBZJ PREZB TCZWH 


recon naiss ance 


a re 
EVRWA MBIHO MBNFQ ZLHQV ERNMB 


) epo are 
ITUCG JBUFW ALWVML KFSLL IFQRX 


It et TT fel TET TT 
at del fst tev] EEE TT TT 


ts te e c n s 
LWZIA LBSMK CFXKN WSNZW TREQA 


ter r non e 
TKTDN LBWAU PRZOQ KFEIW KBSRD 


rt at or ar s 


r 
IVZIN MVCHR MXXRD EXDFU NLWGV 


YVIHE JKAHO 
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c. With a known plain component, the columns are in their original order. This means 


that the partially reconstructed cipher sequences are also in the right order. Each 
cipher sequence is the same sequence, and whatever one row reveals about the spac- 
ing of letters can be transferred to other rows as well. For example, in the second 
row, X follows immediately after W. X can then be placed after W in row three. 
Similarly, all common letters can be placed by carefully counting the intervals and 
ea the same letters at the same intervals in each row. Here is what the matrix 
ooks like after all such values are placed. 


d. Filling all the new values into the text reveals many more possibilities. Completion 


of the solution is routine from this point. 


recon naiss ancep atrol repor tst tene is e locat ngs 
MBNFQ ZLHQV ERNMS EXWFJ MBUFU LWZIA LBSMK CFXKN WSNZW TREQA 


msite ardal ngaf tyk e ter r ntn ig t ent 
XWHRN ACTKP EVBZJ PREZB TCZWH TKTDN LBWAU PRZOQ KFEIW KBSRD 


army re p_ recon naiss ancef rt err po rtst at or war s 
EVRWA MBIHO MBNFQ ZLHQV ERNMB-~ IVZIN MVCHR MXXRD EXDFU NLWGV 


depot areb ingb iltu r pid 


P 
ITUCG JBUFW ALWML KFSLL IFQRX YVIHE JKAHO 


e. The direct symmetry technique can also be used as an alternate method when the 


cipher sequence is the known sequence. The matrix can be inverted, placing the 
cipher sequence on the top of the matrix and the plaintext equivalents inside in 
separate rows for each alphabet. Each row will be the plaintext sequence in the 
correct order. Horizontal intervals recovered in one row can then be duplicated in 
each sequence just as was demonstrated above for cipher sequence recovery. Unlike 
the technique of frequency esi it depends on successful plaintext assump- 
tions, however. It is not as powerful a method of solution, but if plaintext can be 
readily identified, it may be the quickest way to solve a cryptogram. 


Section III 
Solving Periodics With Unknown Sequences 


9-9. Solving Periodics by Indirect Symmetry 


When neither the plaintext nor the ciphertext sequence is known, the matrix cannot be 
initially recovered with sequences in the correct order. Frequency matching cannot be 
used, either. However, some of the interval relationships are preserved even when the 
columns are not placed in the correct order, and these interval relationships can be 
exploited to aid in matrix recovery. 


a. To illustrate how interval relationships are preserved, consider the following two 
matrices. The first is the matrix in its original form. The second is the same matrix, 
rearranged with the plain component in A through Z order. This is the form in 
which you will normally recover a matrix with unknown sequences until enough is 
known to rearrange the columns in the correct order. 


bdfghjkmopqsuvwxyz 
iL [miaiz{tiulyiwly|z{s[alxjo[p [Hin] 

2a le ole eer OS 
y|z|s{a|xlolplH|n[e|p{clp[F{c[1]3 [k[L[m[Q 
julv|w}y}z|s]alx}o|p|Hjnje|s|c|p|ric[1]3| 


[A | 


ial 


3a|xit{clulvic|w[tly[z}s|F/alK|x]o|P|H[N| 
wla[xfolulP[H/ Qin} v{e [pic] t]ply [F(a |i [3 [k[L 
ula jR|x|zlolelH|winle|t)/B]y|c[pjFivic}s |i |3 |x ]L |m|Q| 
ww) fy fujz]sja}R)xjole[P}t]H|nje} aie] vic|p jr ic] 1] 3 


b. The key principle to understand when working with ananalyst’s matrix, like the 
second one above, is that every pair of columns and every pair of rows represents an 
interval in the original matrix. To illustrate this, look at the plaintext A column 
and the plaintext G column in the bottom matrix. The letters D and R appear in 
the first cipher sequence. If you count the distance between the D and R in the 
original (top) matrix, you see that the interval is nine. Similarly, the interval for the 
other pairs in the two columns, R and X, U and P, and M and §, are also nine. For 
any two columns that you compare, the horizontal interval between the letters in 
each alphabet will be the same. The interval will not always be nine, of course. It 
depends on which two columns you are comparing. The point is that between any 
pairs in the same row in the same two columns, the interval will be the same. 


N[e |e 
= (eo 
je [=|o 


c. Next compare the letters in the first cipher sequence and the second in the bottom 
matrix. In the first column, the letters D and R appear, which we already noted are 
nine letters apart horizontally in the original matrix. The letters R and X appear in 


9-17 


9-18 


another column in the first and second sequences, as do U and P, and M and 5. The 
first and second cipher sequences are an interval of nine apart. Whichever pair of 
letters you look at in the first and second cipher sequences, they are nine apart in 
the original cipher sequence. Each pair of cipher sequences represents a different 
interval. For example, the interval heiween the first and third cipher sequence is 
eleven. The interval between the first and fourth is seven. The interval between the 
second and third is two, and so on. 


d. There are a number of ways in which we can use an understanding of these interval 
relationships to help solve a polyalphabetic cryptogram. The use of interval 
relationships where sequences are unknown and columns are out of order is called 
indirect symmetry. This contrasts with the earlier situation with known sequences 
a columns in the correct order, where we used direct symmetry to aid in the 
solution. 


e. To put indirect symmetry to use, consider the following example. Initial recoveries 
in a polyalphabetic system have produced the following information. 


f. In comparing the plaintext A and E columns, we see that the letters R and T and the 
letters M and F are the same interval apart. We do not know what the interval is, 
but we know it is the same in each case. 


g. The same interval appears when we compare the first and third cipher sequences, 
where R and T appear in the first column. Since we know the interval will be the 
same for any pair of letters between the first and third sequences, and we know M 
and F have the same interval as R and T, we can add the letter F in the plaintext 1 
column in the third sequence under the letter M. 


h. Any time we can establish an interval relationship for two pairs in a rectangular 
pattern as above, and can find three of the four letters, also in a rectangular pattern 
elsewhere, we can add the fourth letter to complete the pattern. The pairs must be 
read in the same direction in each case. Notice that we cannot add F in the plain- 
text G column in the first sequence. The interval from the first to the third sequence 
is not the same as the interval from the third to the first. 


i. Matching pairs are usually found by reading horizontally in one case, and vertically 
with one letter in common in the second case, as in the above example. Matching 
relationships may be found anywhere in matrix, however, and are not restricted to 


cases with one letter in common. You can find most such matching pairs by examin- 
ing every column in which you have recovered at least three letters. For each letter 
in the column, look for a match with letters on the same row that are the same as one 
of the other letters in the column. When you find such letters, check for every possi- 
ble complete rectangular relationship, and see if you can find the same relationship 
with one letter missing elsewhere. Oiten the addition of one or two letters is all you 
need to recognize more plaintext in the cryptogram and complete a solution. 


j. If you have reason to believe that the plaintext sequence is the same as the cipher 
sequences, you can use the plaintext sequence in establishing interval relationships, 
too. All the techniques that apply to the ciphertext sequences apply to the plaintext 
sequence as well, when it is the same sequence. 


9-10. Extended Application of Indirect Symmetry 


Indirect symmetry can be used in other ways, too. For example, when enough letters 
have been recovered, you can list all the pairs of letters between each pair of sequence 
and develop partial decimated chains of letters for each, as was explained infparegrap 
[4-8]with monoalphabetic substitution. These partial chains from different atphabe 
combinations can then be combined together geometrically to recover the original 
sequence. This technique is illustrated in the following indirect symmetry problem. 


refer encey ourme ssage numbe reigh teigh tthre esixs top 
SMHPT ZZOPH KRION FIJTYN WRSFN SMKYZ JMKYZ JNPVN ZJKRX JOFSB 


JMILM JMPPM VEVST JMIZK CTWFN SMWEY LNBKG KKRET VHMSG ZJIEL 


si xthre eeigh tfour fours evens top 
ZOGSJ RMBZV ANPVN ZMKYZ JCRCT EOVVX ZWBLX JOFOA TMEXB PUBGA 


Oo nesev enzer ozero hours 
YBWPG ZYXJA WMNPF ZZJPT KFBVA IOVVX HOSOM KZBZV AZRIN YUBV 


ETT ist dete EET fat tebe Tote Tey 


a. Through recognition of the stereotyped beginnings and the use of many numbers, 
the text shown has been recovered, and the recovered values filled into the matrix. 
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More values can be filled into the text, but we will first concentrate on the applica- 
tion of indirect symmetry. 


. To recover additional values through indirect symmetry, examine each column 


with more than two recovered letters in it. Beginning with the fifth column, take 
each letter in turn, and scan the same row as the selected letter for letters that are 
the same as those in the column. The first letter, Z, has no letters in common in its 
row with the letters M, B, P, and N. 


c. For the second letter, M, the common letter Z does appear in its row. Having found 


a common letter, examine each rectangular relationship that exists between the two 
columns. We first see that Z and W have the same interval as M and Z. Links with 
this common letter will not add any more values, however. 


. The next rectangular relationship shows that P and L have the same interval as M 


and Z. Spa M and Z vertically, we look for P or L on the same rows as the M 
and Z to complete the relationship. We find neither P in the second row nor L in the 
first row. If either occurred, we could fill in the other. The letters can be written in a 
column off to the side for future use. 


e. Having observed all relationships from the column with the common letter Z, we 


look for another column with a common letter on the M row. B and P do not occur 
except in our added column. The letter N does occur in the second row, however. 
Examining relationships in the N column, we see that Z and J have the same inter- 
val as M and N reading horizontally. With that established, we read M and N ver- 
tically and look for Z in the second row or J in the last row. This time we find Z in 
the second row. We can add J in the last row in the same column with Z to complete 
the rectangular relationship. 


f. Continuing this process, all the letters shown in bold print can be added to the 


matrix without making any new plaintext recoveries. 


olLfelt| [vi zimicir| [r] [w 


wee 
Lt tinted fztvt | tt fatal | dai tstet t py 


g. It would be easy at this point to return to plaintext recovery to complete the solu- 


tion, but another technique can be used to recover the eee cipher sequences and 
rebuild the matrix. This technique involves listing all links that result by matchin 
each cipher sequence with every other cipher sequence. Sequence 1 is matched wit 


sequences 2, 3, 4, and 5, in turn. Then sequence 2 is matched with 3, 4, and 5; 
sequence 3 is matched with 4 and 5; and sequence 4 is matched with 5. If the plain- 
text sequence were the same as the ciphertext sequence, it would only have been 
necessary to match the plaintext with each cipher sequence to get all combinations. 
When all links have been plotted and combined into partial chains wherever possi- 
ble, the results are shown below. 


1-2: ECHKOR TWZM FIN IL AS 
1-3: EHOV TZB SIP WM KR FN 
1-4: FZP WL KE SV JM OC TI AR 
1-5: OSTFX IZN ER WJ KA CV 
2-3: CHKORV WZMB FIN LP AS 
2-4: AOE NMP SRC FWI JZL 

2-5: LZJX CRS MN OA WF 

3-4: XFTSO NZIVC BP ML RE JW 
3-5: HRA BNX PZF KVS MJ IT 
4-5: PN LJ EA VT CS IF ZX 


h. Each set of partial chains represents a decimation of the original sequence. 
Sometimes, you will be fortunate at this point to find that one of the partial chains 
directly represents the original sequence (decimation one). When this happens, the 
original sequence is the obvious starting point. It does not occur in this example, so 
the best technique is usually to select a set with one of the longer chains as a 
starting point and relate all other sequence combinations to it. Notice that the 
chains produced by sequences 1-2 and by sequences 2-3 are obviously produced by 
the same interval, since many of the partial chains are identical. They make a good 
starting point for this problem. Begin by listing each chain fragment on paper, 
Smee Write the separate chains in different rows so they will not run into 
each other. 


ECHKORV 
TWZ2MB 
F JN 
ILP 
AS 


i. The next step is to relate other chains to the existing plot. By examining the inter- 
vals or patterns that letters from other chains have in relation to the starting chains, 
they can be added by following the same rule. For example, the 1-3 combination can 
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be added by observing that it will fit the starting chains by skipping every other 
letter. This will also enable linking the fifth fragment, AS, with the fourth. After 
adding all the 1-3 chains, the plot looks like this example. 


ECHKORV 
TW2Z2MB 
FIN 
ECH 

AS .ILP 


} Next, search for another combination that can be added to the plot. The 3-4 com- 
bination links by counting backwards every fifth letter, as shown by the V and C of 
the NZIVC chain. This ties all the chain fragments together into one longer chain. 
When all combinations are added, each by their own rule, it results in almost com- 
plete recovery. 


ECHKORV.AS.ILPTWZMBFIN..X. 


k. This technique is known as linear chaining. Sometimes you will be unable to com- 
bine the fragments into one long chain. When all intervals are even, you will always 
end with two separate 13-letter chains, which may be combined by ‘trial and error or 
2 ae out the structure of the original matrix. A second technique, called 

haining, which could have been applied here also, is explained in 


1. Continuing, the chain above must be a decimation of the original sequence. Since V, 
W, and X are spaced consistently nine apart, trying a decimation of 9 produces the 
next sequence. 


VWX.Z2.AMESBC.FHIIJ.~.LNOP.RT. 


m. With G missin ao alphabetical progression, the sequence is keyword mixed, 
based on GAMES. We can now return to the polyalphabetic matrix and rearrange 
the columns using the GAMES sequence on each cipher row. 


oa.u.bwevye-nmw~me.w~xpfrzigs 


¢c 
Kt [NfolPlaiR[t|uly[w]x|y|z|/cjaM[e|s [Bic |p jr |r| 
ol Pair [tfulv[w]x|y|z [cla [mle|s |p ic[o[r [a [1/3 |x) 
e[t [uly |w]x|y|z|o [ale [s [p [clolF fr] [3 [kt [nfo 
E{s|B/c[D|F [n/t {3 [x] |Nlo[Piqir|t|ulv|w]x|y [z/c) 
[Alles |plc[p[F}r{1]3 |x] INjojPjaiR|r july wx} y| 


n. The unused letters can be determined by returning to the plaintext and deciphering 
the rest of the message. The plaintext sequence turns out to be a simple transposi- 
tion mixed sequence based on OLYMPIC. The repeating key is KOREA. 


o. The approach shown to solving this problem is not necessarily the way in which you 
would solve it in actual practice. It would probably be more effective to return to 
the plaintext earlier than was done in this example. This approach was selected to 
show the variety of indirect symmetry techniques that can be used, not necessarily 
because it would yield the quickest solution. 


9-11. Solution of Isologs 


Whenever isologs are encountered between periodic messages with different period 
lengths, it is possible to recover the original cipher sequences without any initial plain- 
text recovery. The ete can then be reduced to monoalphabetic terms and 
quickly solved. Two different techniques may be used, depending on whether the same 
alphabets or different alphabets are used in the isologs. 


a. When isologous cryptograms use the same alphabets with different repeating keys, 
the cipher sequences can be recovered by the indirect symmetry process. Take the 
following two messages, for example. 


Message 1: 
AOPDY JBFKW ATILB XCTKZ KIKVN SHUAJ COWLA PDBRU KRXAT WALBZ 
ZVYZZ YRNC] FPPOJ OBYJQ SESQK SPGUK XIKVW AVUCW MYTXY ZCYZB 


PHBJE SCWXC TKZKV PKN F 
(period 3) 


Message 2: 
DCFHC SBOHH BOENY GMGKB HQOQF FIXHS CVURB KKWUX UEXEQ HBFHP 
SYCCZ NZSFZ MDFST WBNFB VNXEB VYDUS VQOQR TMXMI MNQIJR VIJOSE 


YQBQC CFSAX KODTV WHS (period 4) 
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(1) To solve the isologs, the two messages are first superimposed with the alphabets 
numbered for each. 


: AOPDY JBFKW ATILB XCTKZ KIKVN SHUAJ COWLA PDBRU KRXAT WALBZ 


12312 31231 23123 12312 31231 23123 12312 31231 23123 12312 


: DCFHC SBOHH BOENY GMGKB HQOQF FIXHS CVURB KKWUX UEXEQ HBFHP 


12341 23412 34123 41234 12341 23412 34123 41234 12341 23412 


: ZVYZZ YRNCI FPPOJ OBYJQ SESQK SPGUK XIKVW AVUCW MYTXY ZCYZB 


31231 23123 12312 31231 23123 12312 31231 23123 12312 31231 


: SYCCZ NZSFZ MDFST WBNFB VNXEB VYDUS VQOQR TMXMI MNQIR VIOSE 


34123 41234 12341 23412 34123 41234 12341 23412 34123 41234 


: PHBJE SCWXC TKZKV PKN 


23123 12312 31231 231 


> YOBQC CFSAX KODTV WHS 


12341 23412 34123 412 


(2) With periods of 3 and 4, there are 12 different ways in which the alphabets of the 
first are matched to the alphabets of the second. These begin with the first 
alphabet of message 1 matched with the first alphabet of message 2 and con- 
tinue through alphabet 3 matched with ee 4, After these 12 matches, the 
cycle of matches starts over again. For other periods, the number of different 
alphabet matches is the least common multiple of the two period lengths. The 
least common multiple of 6 and 4 is 12. The least common multiple of 6 and 9 is 
18. For periods of 8 and 9, 72 different alphabet matches are required. 


(3) feria continues by plotting the links for each alphabet ae For example, 
the first link is Al=D1, the second link is O2=C2, and the third link is P3=F3. 
The next example shows all links plotted and combined into partial chains. 


1-1: SXADK IE NFM BH WR CJ 
2-2: YOCX LN SF BW ZPD QE AT 
3-3: TKBY PF HI RU ZS VM 

1-4: KOSVY UXG DH BE 

2-1: PYCM AH KU JT ZD 

3-2: KTGD OW! JS RE ZC HQ 
1-3: BB KK (all links the same) 
2-4: FOV ZB AE YN KS JQ PW 
3-1: KH WU TQ RZ JF XV EC 
1-2: 1QB NSC WH LR XJ 

2-3: AB KO CF SV YR 

3-4: 1ZVQ TO PK LF EN WSs 


(4) The 1-3 plot shows that the same alphabets were used in both these positions. 


(5) The partial chains can be combined into one long chain by a process of 
geometric iets Geometric chaining will often produce results when linear 
chaining is not effective. Geometric chaining is plotted horizontally and ver- 
tically, instead of in one straight line. Relationships between alphabet matches 
can be discovered more readily with this meth 


(6) Geometric chaining begins, as with linear chaining, by selecting one alphabet 
match to plot horizontally. We can select the 1-1 match for its 5-letter chain as a 
starting point. Next, select a second alphabet match to intersect it plotted ver- 
tically. For our example, we will use the 2-2 match, producing the following in- 
itial plot. 


(7) To this initial plot, we add as many other fragments from the 1-1 and 2-2 
matches as we can at this time. We can also set up plots separated from these 
for each one that cannot be linked to it. 


(8) The next step is to find another alphabet match that can easily be added to the 
plot. For example, the 1-2 match proceeds in the diagram along a lower left to 
upper right diagonal, as shown by the NSC and XJ fragments. All the 1-2 frag- 
ments can be added by the same diagonal rule. This ties in the separate plots 
from above, also. 


SG ERaR CRRA 
ttt felafof.[zt {| 
cfafet | | 


Each additional alphabet combination can be added to the plot now. In many 
cases, you may see different possibilities for rules. For example, the 3-4 match 
can be seen to proceed by an up 3, left 1 rule, as shown by the TO link. A simpler 
soa is to plot by the upper left to lower right diagonal, as shown by the 
PK link. The simplest way to describe the 3-3 match is up 1, right 2, as shown 
by the TK or BY links. This is similar to a knight’s move in chess. When all 
matches are plotted, they produce this diagram. 


PET Lt fr iyfifele|s | 
P| | ivicip|ajolulz|n yr | 
| la[pixalwir|c|a}Plvic | | 
| [thy |ife[e|s|xlalp[K/Q | 
| folulz inte imit} y(t fe | 
LL iatPivicielajofey | | 


> 
\oO 
— 


(10) The rows can easily be extended into one 26-letter chain at this point, but if 
alphabetic progression can be spotted by any other rule, it can be used instead. 
For example, starting with the V in the upper left part of the diagram, VWXY 
appears by a descending knight’s move. Continuing from the Y that repeats 
near the left side, the sequence can be extended further. The complete 
sequence appears below. 


GRAINBCDEFHIKLMOPQSTUVWXYZ 
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(11) Using the new recovered sequence and the relationships between the alphabets 
of messages 1 and 2, the matrices for both messages can be set up. Using the 
first cipher sequence for message 1, all the cipher sequences for message 2 can 
be lined up with it using the links already plotted. Here is how the message 2 
alphabets lie up with alphabet one. The first 1-1, 1-2, 1-3, and 1-4 links from 
the isologs are shown sibold print to demonstrate how they were lined up. 


Ci: GRAINBCDEFHIKLMOPQS TUVWXYZ 
C2: . 

CO a 
Ci: BC DEFHIKLMOPQSTUVWXYZGRAIN 
C2? MOPQSTUVWXYZGRAINBCDEFHIKL 
C3: GRAINBCDEFHIKLMOPQS TUVWXYZ 
C4s INBCDEFHIKLMOPQSTUVWXYZGRA 


(12) Similarly, the alphabets in the first matrix can be completed by plotting the 
relationships between the second message and the first. The solution then 
becomes a matter of reducing them to monoalphabetic terms. 


(13) In cases where the two periods have a common factor, the sequences can still 
be recovered, but they cannot be fully aligned. In this case, the chi test can be 
used to match the sequences by frequencies, if necessary, once the sequences 
are known. 


b. A different technique must be used if different alphabets are used between the 
isologs, not just different repeating keys. For example, consider the next two 
messages. 


Message 1: 
AUUIJB NFMOI AXCQD LHXPE OCPZD XMZAN HUGQV OIAZZ POPAA FOZUY 
OQEOX BRDHA MVUUO SFBNW XJXWO XVEZP IPHYM WODOT CMOTU CTUPT 


UOYRO SBBMP CMMXA ATYAN F 
(period 3) 


Message 2: 
ZCIPY RZXLG ZXSNP CNLNH LQDZU FXALR SIGIH MQTCA GTNMQ TCZGG 
ZYZTG GORIB NDISF YZGUB KGKEZ IMDIJS HLIYN EZKFF XXLOG CYCSG 


KTHJIL VTINA ORDLW MPDZK : 
(period 4) 
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(1) The sc yeu are different in the two messages, and they cannot be directly 


chained together. If you listed the links resulting from the two messages using 
the previous technique, they would lead nowhere and contradictions would 
quickly develop. The cipher sequences of each must be kept separate. 


The method of recovering the cipher sequences when they are different is to set 
up periodic matrices one over the other, as shown below. Message 1 and message 
2 equivalents are then plotted in the correct sequence for each in the same 
columns. Initially, this will result in more than 26 columns, but as incomplete 
columns are combined with each other, the matrices will collapse to the correct 
width. This method could be used with more than two isologs also, by superim- 
posing as many matrices as there are isologous messages. 


> AUUJB NFMOI AXCQD LHXPE OCPZD XMZAN HUGQV OIAZZ POPAA FOZUY 


12312 31231 23123 12312 31231 23123 12312 31231 23123 12312 


: ZCIPY RZXLG ZXSNP CNLNH LQDZU FXALR SIGIH MQTCA GTNMQ TCZGG 


12341 23412 34123 41234 12341 23412 34123 41234 12341 23412 


: OQEOX BRDHA MVUUO SFBNW XJXWO XVEZP IPHYM WODOT CMOTU CTUPT 


31231 23123 12312 31231 23123) 12312 31231 23123 12312 31231 


: ZYZTG GORIB NDISF YZGUB KGKEZ IMDIJS HLIYN EZKFF XXLOG CYCSG 


34123 41234 12341 23412 34123 41234 12341 23412 34123 41234 


; UOYRO SBBMP CMMXA ATYAN 


23123 12312 31231 23123 


: KTHJL VTINA ORDLW MPDZK 


12341 23412 34123 41234 


Message 1: 


Ron a 


(3) The first three groups of each message are plotted above. Each time a previous! 
used letter appears in the same sequence, the two columns can be combined. 
For example, in message 2, the Zs in the third sequence allow those two columns 
to be combined, and similarly, the Xs in the fourth sequence can be combined. 
In the next example, the complete messages are plotted and all possible 
columns are combined. 


Message 1: 
1 fatxim{a{tiple{P] fit jefel | [vy] fel |wlul | [zt [stay 
2 jelulH] [el fami [y|wi | fel [vt | [| fefofx] [Rf 


| [elu [a[nfo[x}ifa] fc[m] [pjefsiy|r} [o]zir] | | [P| 
Message 2: 


Z[KIN| |yjule[olR]Q] | [st | [] [fof |elrfe] | [vt | 
| fe} | folritie| [ole| fain] [oiyin] fejal [rt | | T | 
wie}et [rt [zint | | lolx} [ele] | | | [ofelK ia] | [s| 
Hr iRipiais)mix} fet ici | || | ivy | siz] falst | | 


hw ny + 


(4) These matrices can easily be completed by direct symmetry, remembering that 
the sequence in each matrix is different. 


Message 1: 


BOS Om ate 


No} P}Q{s [uly] w| 


[tT] w]x]y¥|z[s ful. [t[v[a[N[eic [ole [F] cl] 3[K[m]o| 
[3] k[Mjo|P [air |T|w|x]y¥|z/s[ult |1[v]a}N[B{c|D/E, 
o[P] air t{w[x|y|z}sjule|t|via|N |e [cl] ple] [cla] a 
NB Jc [ope LF] cH }3 | |mfo}r] afr] t}w]x]y jz] sfule|1f via 


(5) Either cryptogram can now be reduced to monoalphabetic terms and solved, as 
before. 
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CHAPTER 10 


APERIODIC POLYALPHABETIC  CIPHERS 


10-1. Simple Manual Aperiodic Systems 
| Chapter 9|showed that periodic polyalphabetic systems are generally more secure than 


monoalphabetic systems. However, the regular, repeating nature of the keys in 
periodic systems are a weakness that an analyst can exploit. Using factor analysis or 
the phi test, the analyst can readily determine how many alphabets there are and 
which letters are enciphered by which a aa Aperiodic polyalphabetic systems 
eliminate the cen ns use of alphabets so the analyst cannot easily tell which 
letters are enciphered by which alphabets. There area number of ways to use a limited 
set of alphabets but suppress their regular uae The following subparagraphs 
show the most common types of these, and briefly discuss their weaknesses and 
approaches to their solution. They are presented to make you aware of the possibility 
that such techniques can be used, but no detailed explanation of their solution is 
given. 


a. Word Length Aperiodic. The simplest type of aperiodic changes alphabets with 
each word instead of each letter. The analyst cannot tell which letters are encrypted 
by which alphabet until the text is recovered. However, the major weakness of this 
system is that when repeats occur, they are likely to be word length, and plaintext 
word patterns show through as clearly as with monoalphabetics. When alphabets 
are known, the generatrix method makes the plaintext obvious. 


om 


. Numerically Keyed Aperiodic. Another approach, similar to word-length 
encipherment, is to change alphabets after a number of letters, determined by a 
numerical key. The numerical key is often based on the repeating key. The key is 
generated by the same process used with a numerically keyed transposition 


sequence. The letters in the repeating keyword are numbered alphabetically. Then 
the key determines how many letters are enciphered consecutively by each 
alphabet. For example, here is a short message enciphered by a numerically keyed 
aperiodic based on the keyword BLACK. 


abcdefghijkimnopqrstuvwxyz 
2/B(C[DIE[F[c]H/1[3|k|t[M|NlolPlair[s[t[ulv [wx] y]z[A ] 
3 [Min [ol PjQiR{s|tlulv[w[x]y|z[a]B[c[o[e[F[c|y] 1] 3/K| 
a[s{c[plelF[¢|y] 1 [3|K[t[minfolplalr|s|t|ulv[w[x]y[z 
3,C[D[e|F/G)H/ 1/3 ]/K[L[M[Nfo/Plair[s[t[ulv[wix]y[z/a]B 
ois|t[mnjo}P/aiR]s|tfulviw]x|y[zjafe[c[pelr ic] a] [3 


2 5 1 3 4 2 5 1 3 
en emyat t ack ingo na Ilfron ts 
FO PXJLE T CEM SXQY OB WWQCZ N VU 


This system, while more complicated than a word-length aperiodic, allows many 
repeats and patterns to appear. When the alphabets are known, use of the 
generatrix method also quickly reveals the plaintext. 


c. Interruptor Letter Aperiodic. Another aes to breaking up the cyclic nature 
of periodic systems is through the use of an interruptor letter. In ze ae letter 
systems, the alphabets are used in rotation like a periodic system, but whenever a 
preselected plaintext (or alternatively, ciphertext) letter is encountered, the rota- 
tion is interrupted and encipherment returns to the first alphabet. This is a more 
secure method than the previous two, but it can have the effect of creating repeats 
that would not otherwise occur. For example, if a plaintext R is used as an interrup- 
tor letter, every time REINFORCEMENTS appears in the text, encipherment from 
the second letter on will be identical every time. The letter after the initial R will be 
enciphered by the first alphabet each time because of the interruption. The same 
thing will happen with any word that begins with the interruptor letter. Use of a 
ciphertext interruptor letter instead of a teens letter will avoid many of these 
repeats, but the interruptions will generally occur much less often in such a case. 


10-2. Long-Running Key Aperiodic 


Much more common than the simple manual aperiodic systems described in the 
previous paragraph are those that use a long-running, ever changing key. These 


systems may be enciphered manually, by cipher machine, or by computer, as first dis- 
cussed in| paragraph 8-1). Figure 8-1] gave an example of using a book key where the key 


10-1 
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letters were a quotation. A quotation, particularly from a book, provides a ready source 
of long-running keys, but it is relatively unsecure, because the key itself is so orderly. 
More often, the keys will be random or pseudorandom. The keys are applied to the 
age using an alphabet chart like the balay square inFigure The keys may 

e generated i a pseudorandom, repeatable process or by a random, nonrepeatable 
ieee Both the sending and receiving stage sha must have a copy of the same 

ook or pad of keys. When these are intended for single usage of the keys, the system is 
called a one-time pad system. Truly random one-time pad systems are absolutely 
unbreakable when used properly. When keys are reused, however, whether by mistake 
or by design, the messages with the reused keys are likely to be recoverable. Manual 
one-time pad systems are slow oe to use and present logistics problems for any 
large scale usage. The volume of keys must be at least equal to the volume of messages 
to be sent, When more than one communications link shares the use of copies of the 
oo pad, careful procedures must be set up to prevent reuse of the same keys by dif- 
erent users. 


10-3. Solution of Long-Running Key Aperiodic 


The solution of messages enciphered in long-running key systems may be possible in 
three situations. First, the key generation process may be known in advance from prior 
recoveries or other sources. Second, the keys may be so orderly that they are 
recognizable when partially recovered, as can occur when plaintext is used as the 
source of keys. Third, the same sequence of keys is reused. We are primarily concerned 
with the third case, where keys are reused. 


a. Depth Recognition. A reuse of long-running keys is called a depth. Messages using 
the same keys are called messages in depth. If the keys begin at the same point in 
two or more messages, the messages are in flush depth. If the keys begin at different 
points in two or more messages, but include reused keys for at least part of the 
messages, they are in offset depth. The solution of messages in depth first requires 
you to recognize that the depth exists. 


(1) One way to recognize depth is through exploitation of indicator systems. In one- 
time pad systems and in many types of cipher machine or computer systems, 
the starting point or settings for the keys must be known by the enciphering and 
deciphering cryptographers. This information on the keys is often passed from 
cryptographer to cryptographer ay the use of an indicator system. The 
first ay to recognize a depth is to find two messages or transmissions with 
identical indicators. Identical indicators will often tip-off that a flush depth is 
occurring. 


(2) The second way to recognize depth is to find repeated text between two or more 
messages. Except for short accidental repeats, repeated ciphertext will only 
occur when the same plaintext is enciphered with the same keys. In periodic 


systems and simple manual aperiodic, this will often occur within a single 
message as the same keys are reused. With long-running key aperiodic, this 
will only occur between messages when keys are reused. If all depths are expec- 
ted to be flush depths, the search for repeats is a matter of peste 
messages and looking for repeats in the same position in each message. If depths 
are offset, they are more difficult to find by inspection alone. 


(3) The third way to recognize depth is to use a type of coincidence test known as 
the kappa test. Whether whole words and phrases are repeated using the same 
keys or not, individual characters using the same keys will occur frequently 
when depths are present. When two messages are matched together, letter by 
letter, and do not use the same keys, 1 out of 26 letters (or 3.85 percent) will ran- 
domly match. Of course, if a different alphabet is used, or if characters other 
than letters are also used, the expected number of matches by chance alone will 
be 1 out of the total number of different characters used. On the other hand, if 
the messages are correctly placed in depth, a letter by letter comparison (the 

pelle test) will produce matches about 6.67 percent of the time. Also, the 

results can be expressed as a kappa index of coincidence showing the ratio of 
observed coincidences to random expectation. As with searching for repeats, it 
is much easier to find flush depths than it is to find offset depths, but with com- 

a support, messages can be matched in every possible alignment to search 

or depths. 


(4) As an example of depth recognition, consider the three messages that follow. 
Each has similar indicator groups that suggest the messages may be in depth 
with each other. Messages 1 and 2 have identical indicators. Message 3 differs 
only in the last digit of the second group. 


Message 1: 

33632 0406 HJJBW KBZGA OWSON SRICF AGORU EOGVA CNWIH GLVZX 
MDSAF EMFGP VNNNN ABJPZ TINVL QMGGN TVBAP MDODN ODMIO NOTWO 
XANAC CNLXS EMBWV CVZYD FTPUC TQNAW ZUTUH JJ632 


Message 2: 
33632 0406 FWFQA VSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOIIG 


XDRAF GFEMM GTCZN VMYSN UHCYM GZBPP BOVYW BLQIO AKEXM NMNTN 
SODPA UNBMO QYYQS GOBMA WSUQL JIJ632 


Message 3: 

33632 0407 KDHYW QOEBJ DBJIGH PYGEP HOQNY OOISH UYMHX MGTUC 
EYWTG RLRKQ YKISC QNPTB JFCRA EKZXA LLCOZ HIKYE UJPKC SHWHN 
VWAXF APEVG XJDQS FISYL SQLCY JAGRP 33632 
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(5) There are no repeats longer than three letters between any of the three 
messages. Because of the identical indicators, we first try to match messages 1 
and 2 at a flush depth using the kappa test. The number of matches multiplied 
by 26 and divided by the number of comparisons equals the kappa IC. Do not 
count the indicator groups in the comparisons. 


: 31632 0406 HJJBW KBZGA OWSON SRICF AGORU EOGVA CNWIH GLVZx 


JJ632 0406 FWFQA VSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOIIG 


: MDSAF EMFGP VNNNN ABJPZ TJNVL QMGGN TVBAP MDODN ODMIO NOIWO 
: XDRAF GFEMM GTCZN VMYSN UHCYM GZBPP BOVYW BLQIO AKEXM NMNTN 


: XANAC CNLXS EMBWV CVZYD FTPUC TQNAW ZUTUH 33632 
: SODPA UNBMO QYYQS GOBMA WSUQL JJ632 


2 to 1: offset 0 
13 matches out of 115 comparisons 
Kappa IC = 2.94 


(6) As shown by the kappa test, the number of matches is well above random expec- 
tation. The two messages area to be in flush depth with each other. Next we 
try message 3 matched with the first two at a flush depth. 


1: 33632 0406 HJJBW KBZGA OWSON SRIJCF AGORU EOGVA CNWIH GLVZX 


: JJ632 0406 FWFQA VSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOIIG 
* 33632 0407 KDHYW QOEBJ DBJGH PYGEP HOQNY OOISH UYMHX MGTUC 


1: MDSAF EMFGP VNNNN ABJPZ TINVL QMGGN TVBAP MDODN ODMIO NOIWO 
2: XDRAF GFEMM GTCZN VMYSN UHCYM GZBPP BOVYW BLQIO AKEXM NMNTN 
3: EYWTG RLRKQ YKISC QNPTB JFCRA EKZXA LLCOZ HIKYE UJPKC SHWHN 


: XANAC CNLXS EMBWV CVZYD FTPUC TQNAW ZUTUH JJ632 
* SODPA UNBMO QYYQS GOBMA WSUQL J3632 
: VWAXF APEVG XJDQS FISYL SQLCY JAGRP J3632 


3 to 1 and 2: offset 0 
9 matches out of 235 comparisons 
Kappa IC = 1.00 


(7) The flush match of message 3 is clearly not a correct match, because of the low 
kappa index of coincidence. We next try offsets of 1, 2, 3, 4, and 6 letters to the 


right. 


2 No 


1: MDSAF EMFGP VNNNN ABJPZ TJNVL 
2: XDRAF GFEMM GTCZN VMYSN UHCYM 
3: CEYWT GRLRK QYKIS CQNPT BJFCR 


= 


XANAC CNLXS EMBWV CVZYD FTPUC 
SODPA UNBMO QYYQS GOBMA WSUQL 
3: NVWAX FAPEV GXJDQ SFISY LSQLC 


ed 


3 to 1 and 2: offset 1 
13 matches out of 234 comparisons 
Kappa IC = 1.44 


Ro 


1: MDSAF EMFGP VNNNN ABJPZ TINVL 
2: XDRAF GFEMM GTCZN VMYSN UHCYM 
3: UCEYW TGRLR KQYKI SCQNP TBIFC 


CNLXS EMBWV CVZYD FTPUC 
: UNBMO QYYQS GOBMA WSUQL 
3: HNVWA XFAPE VGXJD QSFIS YLSQL 


Ny 
Vv 
ge 
I> O 


3 to 1 and 2: offset 2 
8 matches out of 233 comparisons 
Kappa IC = 0.89 


JJ632 0406 HJJBW KBZGA OWSON SRICF AGORU EOGVA CNWIH GLVZX 
JJ632 0406 FWFQA VSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOLIG 
JJ632 0407 KDHY WQOEB JDBJG HPYGE PHOQN YOOIS HUYMH XMGTU 


QMGGN TVBAP MDODN ODMIO NOIWo 
GZBPP BOVYW BLQIO AKEXM NMNTN 
AEKZX ALLCO ZHIKY EUJPK CSHWH 


TQNAW ZUTUH J3632 
33632 
YIJAGR PJJ63 2 


33632 0406 HJJBW KBZGA OWSON SRICF AGORU EOGVA CNWIH GLVZX 
JJ632 0406 FWFQA VSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOIIG 
33632 0407 KDH YWQOE BJDBJ GHPYG EPHOQ NYOO! SHUYM HXMGT 


QMGGN TVBAP MDODN ODMIO NOIWO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
RAEKZ XALLC OZHIK YEUJP KCSHW 


TQNAW ZUTUH 33632 
33632 
CYIJAG RPJJ6 32 


1: 33632 0406 HJJBW KBZGA OWSON SRICF AGORU EOGVA CNWIH GLVZX 


2: 331632 0406 FWFQA VSAIA UOSOS 


SHMQD YGLNO YOOQV GNVSD BOIIG 


3: 33632 0407 KD HYWQO EBJDB JGHPY GEPHO QNYOO ISHUY MHXMG 


1: MDSAF EMFGP VNNNN ABIJPZ TINVL 
2: XDRAF GFEMM GTCZN VMYSN UHCYM 
3: TUCEY WITGRL RKQYK ISCQN PTBIF 


1: XANAC CNLXS EMBWV CVZYD FTPUC 
2: SODPA UNBMO QYYQS GOBMA WSUQL 
3: WHNVW AXFAP EVGXJ DQSFI SYLSQ 


3 to 1 and 2: offset 3 
6 matches out of 232 comparisons 
Kappa IC = 0.67 


CMGGN TVBAP MDODN ODMIO NOIWO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
CRAEK ZXALL COZHI KYEUJ PKCSH 


TQNAW ZUTUH 33632 
33632 
LCYJA GRPJJ 632 
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1.33632 0806 HJIBW KBZGA OWSON 


Ny a 


: MDSAF EMFGP VNNNN ABJPZ TINVL 
: XDRAF GFEMM GTCZN VMYSN UHCYM 
: GTUCE YWIGR LRKQY KISCQ NPTBJ 


: XANAC CNLXS EMBWV CVZYD FTPUC 
: SODPA UNBMO QYYQS GOBMA WSUQL 
: HWHNV WAXFA PEVGX JDQSF ISYLS 


3 to 1 and 2: offset 4 
9 matches out of 231 comparisons 
Kappa IC = 1.01 


on 


XN 


>: JJ632 0406 HJJBW KBZGA OWSON 
: JJ632 0406 FWFQA VSAIA UOSOS 
: 33632 0407 KDHYW QOEBI 


: MDSAF EMFGP VNNNN ABJPZ TJNVL 
: XDRAF GFEMM GTCZN VMYSN UHCYM 


MGTUC EYWIG RERKQ YKISC QNPTB 


1: XANAC CNLXS EMBWV CVZYD FTPUC 


N 


: SODPA UNBMO QYYQS GOBMA WSUQL 
: SHWHN VWAXF APEVG XJDQS FISYL 


3 to 1 and 2: offset 5 
17 matches out of 230 comparisons 
Kappa IC = 1.92 


SRICF AGORU EOGVA CNWIH GLVZX 


> JJ632 0406 FWFQA YSAIA UOSOS SHMQD YGLNO YOOQV GNVSD BOIIG 
: JJ632 0407 K DHYWQ OEBJD BIGHP YGEPH OQNYO OISHU YMHXM 


QMGGN TVBAP MDODN ODMIO NOIWO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
FCRAE KZXAL LCOZH IKYEU 3PKCS 


TQNAW ZUTUH 33632 
31632 
QLCY] AGRPJ 3632 


SRICF AGORU EOGVA CNWIH GLVZX 
SHMQD YGLNO YOOQV GNVSD BOIIG 
DBIGH PYGEP HOQNY COISH UYMHX 


QMGGN TVBAP MDODN ODMIO NOIWO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
JFCRA EKZXA LLCOZ HIKYE UJPKC 


TQNAW ZUTUH 33632 
33632 
SQLCY JAGRP JJ632 


(8) The offset of five is clearly the best match of those tried, and the kappa index of 
coincidence is a good value for a correct match. The three messages are now 


correctly placed in depth. 


b. Depth Reading. When the messages are superimposed properly, they can be solved 


by a process known as ies reading. With only a few messages, the process of 
applying the key must be known. With manual systems, standard alphabets are 
commonly used. With ies machine or computer based systems, the process of 


baud addition is usually known or can be figured out easily. The three messages in 
our example use the standard alphabet Vigenere square of Figure 10-1). 


x 
3) 
-_ 
= 
8 
Qo. 


cago agqwhortrerenevwuy SZO0ON OCH NH D> BK™N 


> 
@ 
x 


Figure 10-1. Vigenere square. 
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(1) With three messages in depth, almost any correct assumption of plaintext will 
lead to a quick solution. For example, trying the word REPLACEMENT as the 
first word of message 3 produces the results shown below. 


rchte amarr 
1: 33632 0406 HIIBW KBZGA OWSON 


ctive gearw 
2: J3632 0406 FWFQA VSAIA UOSOS 


repla cemen 


3: J3632 0407 KDHYW QOEBI 


Key: TZSNW OKSXW 


3: JJ632 0407 


1: MDSAF EMFGP VNNNN ABJPZ TINVL 


XDRAF GFEMM GTCZN VMYSN UHCYM 


: MGTUC EYWIG RLRKQ YKISC QNPTB 


1: XANAC CNLXS EMBW CVZYD FTPUC 
: SODPA UNBMO QYYQS GOBMA WSUQL 
: SHWHN VWAXF APEVG XJDQS FISYL 


i 
SRIJCF AGORU EOGVA CNWIH GLV2X 
i 
SHMQD YGLNO YOOQV GNVSD BOIIG 


t 
DBJGH PYGEP HOQNY OOISH UYMHX 
K 


QMGGN TVBAP MDODN ODMIO NOIWO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
JFCRA EKZXA LLCOZ HIKYE UJPKC 


TQNAW ZUTUH JJ632 
33632 
SQLCY JAGRP 33632 


(2) Recovering the key from the assumption of REPLACEMENT and using it to 
decipher the other two messages produces good segments of plaintext in each 
message. It is easy to build on these assumptions to recover additional plain- 
text. For example, assuming that the second message begins PROTECTIVE 
GEAR and that the word after TEAM in the first message is ARRIVING leads 


to additional recoveries. 


resea rchte amarr 


1: JJ632 0406 HJJBW KBZGA OWSON 


prote ctive gearw 


2: 33632 0406 FWFQA VSAIA UOSOS 


repla cemen 
KDHYW QOEBI 


Key: QFRXW TZSNW OKSXW 


1: MDSAF EMFGP VNNNN ABJPZ TINVL 
2: XDRAF GFEMM GTCZN VMYSN UHCYM 
3: MGTUC EYWTG RLRKQ YKISC QNPTB 


1: XANAC CNLXS EMBWV CVZYD FTPUC 
: SODPA UNBMO QYYQS GOBMA WSUQL 
: SHWHN VWAXF APEVG XJDQS FISYL 


iving 
SRJCF AGORU EOGVA CNWIH GLVZX 


illbe 
SHMQD YGLNO YOOQV GNVSD BOIIG 


tfiri 
DBJGH PYGEP HOQNY OOISH UYMHX 


KWBPZ 


QMGGN TVBAP MDODN ODMIO NOIWoO 
GZBPP BOVYW BLQIO AKEXM NMNTN 
JFCRA EKZXA LLCOZ HIKYE UJPKC 


TQNAW 2ZUTUH 33632 
JJ632 
SQLCY JAGRP JJ632 


(3) This process of assuming text can be continued to a complete solution. Correct 
assumptions are easily verified. Incorrect assumptions are quickly disproved. 


(4) The most difficult step is making the first correct assumption. Message begin- 
nings are the most likely area to yield results, because they are likely to be very 
stereotyped. Sometimes, just trying the letters RE at the beginning of a message 
will be enough to auepot the text of the messages in ay with it. When 
message beginnings do not yield results, more powerful techniques are 
available. 


c. Crib Dragging. When you cannot assume the beginning of a message, you can still 
often correctly assume a particular word that will be in a message. The assumptions 
can come from familiarity with previous messages, results of traffic analysis and 
direction finding, or other intelligence sources. Once you suspect a word is in one of 
two or more messages in depth, you can systematically try the word at every posi- 
tion, recover the keys each position would produce, and try the keys in the other 
message or messages to see if the keys produce more plaintext. This is a laborious 
process performe wees but a sure one. Fortunately, there are some short cuts 
that can be used to simplify the process. 


(1) Two messages in depth can generally be combined in such a way that you can 
skip the step of key recovery_and proceed directly to checking for plaintext. 
With the Vigenere square of this can be accomplished by treating 
one message as if it were plaintext, the other as ciphertext, and producing the 
resulting key stream, which is actually a combination of the two ciphertexts. To 
demonstrate this process, consider the beginnings of messages 1 and 2 from the 
previous example. If we combine message 1 and message 2 as if they were plain- 
text and ciphertext respectively, it produces a combination text for the first 
eroups of YNWPE, Message 1 letters are used as keys in the Vigenere square. 


Message 2 letters represent the internals of the Vigenere square. For example, 
key H matched against internal F produces plaintext Y. 


Message 1: HJ] J BW... 
Message 2; F WF QA... 
Combination: YN WPE ... 


(2) If we now apply the correct ia of message 1 to the combination text using 
the Vigenere square, it will directly produce the plaintext of message 2. The 
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combination text is again found in the key letter position in the square, and the 
plaintext is found in the same position for each message as the original cipher- 
texts. 


Message 1:HIIJIBW... 
Message 2; F WF QA... 
Combination: YNWPE  ... 


Message 1: re Ss e@a... 


Message 2; P F Oo t € ..- 


(3) The combination text can be systematically used to try out a plaintext assump- 
tion in every position by a process known as crib dragging. Crib is a common 
synonym for assumption in cryptanalysts. Consider the following two messages 
in depth. The first message was sent by a unit undergoing an artillery barrage. It 
is likely that the word ARTILLERY will be found in the message. 

Message 1: IOZHN EJBTK AKRZE STXVZ GCAVH FIRVX DQNUT 


Message 2: UKMWR SDCXM HVOUS OFHUD PICDV BKUPC OEWKK 


(4) The first step to trying out ARTILLERY in message 1 is to create the combina- 
tion text. Message 1 is treated as plaintext and message 2 as ciphertext. 


Message 1: IOZHN EJBTK AKRZE STXVZ GCAVH FIRVX DQNUT 
Message 2: UKMWR SDCXM HVOUS OFHUD PICDV BKUPC OEWKK 
Combination: MWNPE OUBEC HLXVO WVMKZE JGCIO WBDUF LOJQR 


(5) The results of trying ARTILLERY in each of the first three positions are shown 
below. 
Message 1: I1OZHN EJBTK AKRZE STXVZ GCAVH FJRVX DQNUT 
Message 2: UKMWR SDCXM HVOUS OFHUD PICDV BKUPC OEWKK 
Combination: MWNPE OUBEC HLXVO WWKZE JGCIO WBDUF LOJQR 
1: artil lery 
2: mngxp zysc 


Combination: MWNPE OUBEC HLXVO WMKZE JGCIO WBDUF LOJQR 
1: arti Llery 


2: weim zffva 


Combination: MWNPE OUBEC HLXVO WMKZE JGC1O WBDUF LOJQR 
1: art iller y 
2: ngx wimit f 
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(6) Obviously, not one of the first three tries is the correct placement of 
ARTILLERY. The process can be speeded up, however, by plotting the crib ver- 
tically and the resulting text for message 2 on a descending diagonal. 


Message 1: IOZHN EJBTK AKRZE STXVZ GCAVH FIRVX DQNUT 
Message 2: UKMWR SDCXM HVOUS OFHUD PICDV BKUPC OEWKK 


Combination: MWNPE OUBEC HLXVO WMKZE JGCIO WBDUF LOJOR 
Crib: a mwn 


ro neg 
t gix 

i xm w 

1 p zf 

1 zim 

e yfi 

r svt 

y ca f 


(7) The plot above is identical in results to the three separate plots that preceded. 
Once this format is adopted, it is easier to write in a whole row at a time. 


Message 1: IOZHN EJBTK AKRZE STXVZ GCAVH FJIRVX DONUT 
Message 2: UKMWR SDCXM HVOUS OFHUD PICDV BKUPC OEWKK 
Combination: MWNPE OUBEC HLXVO WMKZE JGCIO WBDUF LOJQR 


Crib: a mwnpe oubec hlixvo wmkze jgcio wb 
r negvy flsvt ycomf ndbqv axtzf nsu 
t gix hnuxv aeqgoh pfdsx czvbh puwn 
i xm wejmk ptfidw eushm rokqw ejlcn 
I p zimpn swigz hxvkp urntz hmofq w 
! zfimpn swigz hxvkp urntz hmofq wz 
e yfig Ipbzs aqodi nkgms afhyj psn 
r svt ycomf ndbqv axtzf nsulw cfag 
y ca fjvtm ukixc heagm uzbsd jmhop 


(8) The plaintext for message 2 appears on the sixth diagonal, as highlighted above. 
Once the text is spotted and the crib confirmed, it becomes a matter of depth 
reading, as before. The worksheet can now be set up and the rest of the text 


recovered. 


artil lery 
Message 1: IOZHN EJBTK AKRZE STXVZ GCAVH FIJRVX DQNUT 


olumn spot 
Message 2: UKMWR SDCXM HVOUS OFHUD PICDVY BKUPC OEWKK 


Key: ESILZ PGAB 
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(9) With cipher machine and computer based systems that use baud addition, 
adding two messages in depth together by baud addition eliminates the key. 
The baud addition of the two ciphertexts is identical to the baud addition of the 
two original plaintexts. 


(10) Whatever type of alphabet square or system of combining bauds is used, there 
is usually a way to combine texts in depth to eliminate the effects of the key. If 
you are unsure how to approach a particular type of system, test samples you 
create for yourself in the system to see how ciphertext can be combined to 
eliminate the effect of the key. 


PART FIVE 


Transposition Systems 


CHAPTER 11 
TYPES OF TRANSPOSITION SYSTEMS 


11-1. Nature of Transposition 


Transposition systems are fundamentally different from substitution systems. In sub- 
stitution systems, plaintext values are replaced with other values. In transposition 
systems, plaintext values are rearranged without otherwise changing them. All the 
plaintext characters that were present before encipherment are still present after 
encipherment. Only the order of the text changes. 


Fer) 


. Most transposition systems rearrange text by single letters. It is possible to 
rearrange complete words or groups of letters rather than single letters, but these 
approaches are not very secure and have little practical value. Larger groups than 
single letters preserve too much recognizable plaintext. 


om 


. Some transposition systems go through a single transposition process. These are 
called single transposition. Others go through two distinctly separate transposition 
processes. These are called double transposition. 


aQ 


. Most transposition systems use a geometric process. Plaintext is written into a 
geometric figure, most commonly a rectangle or square, and extracted from the 
geometric figure by a different path than the way it was entered. When the 
geometric figure is a rectangle or square, and the plaintext is entered by rows and 
extracted by columns, it is called columnar transposition. When some route other 
than rows and columns is used, it is called route transposition. 


jon 


. Another category of transposition is grille transposition. There are several types of 
grilles, but each type uses a mask with cut out holes that is placed over the 
worksheet. The mask may in turn be rotated or turned over to provide different pat- 
terns when placed in different orientations. At each position, the holes lineup with 
different spaces on the worksheet. After writing plaintext into the holes, the mask is 
removed and the ciphertext extracted by rows or columns. In some variations, the 
plaintext may be written in rows or columns and the ciphertext extracted using the 
grille. These systems may be difficult to identify initially when first encountered, 
but once the process is recognized, the systems are generally solvable. 
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e. Transposition systems are easy to identify. Their frequency counts will necessarily 
look just like plaintext, since the same letters are still present. There should be no 
repeats longer than two or three letters, except for the rare longer accidental repeat. 
The monographic phi will be within plaintext limits, but a digraphic phi should be 
lower, since repeated digraphs are broken up by transposition. Identifying which 
type of transposition is used is much more difficult initially, and you may have to 
try different possibilities until you find the particular method used or take advan- 
tage of special situations which can occur. 


f. Columnar transposition systems can be ear when keys are reused with 
messages of the same length. As will be explained i the plaintext to 
messages with reused keys can often be recovered without regard to the actual 
method of encipherment. Once the plaintext is recovered, the method can be 


reconstructed. 


11-1. Examples of Columnar Transposition 


The most common type of transposition is columnar transposition. It is the easiest to 
train and use consistently. 


a. Simple Columnar Transposition. At its simplest, columnar transposition enters 
the plaintext into a rectangle of a predetermined width and extracts ciphertext by 
columns from left to right. For example, a simple columnar transposition with a 
width of seven is shown below. 


Plaintext. ENEMY TANKS APPROACHING HILL EIGHT SIX THREE STOP 


Ciphertext: 
ENOHH RNKAI TEESC LSEMA HLISY PIEXT TPNIT OARGG HPXXX 


(1) The cryptographer receiving the above message knows only that a width of 7 
was originally used. The cryptographer rebuilds the matrix by determining the 
length of each column and writing the ciphertext back into the columns. With a 
wickh of 7 and a length of 42, each column must have 6 letters. Inscribing the 
ciphertext into columns from left to right recreates the original matrix, and the 
plaintext can be read by rows. 


(2) Not all messages will come out even on the bottom row. Here is the same 
message with STOP omitted. The columns are not all the same length. In this 
case, the matrix is called an incompletely filled matrix. 


PEIN IE[M[y(T/A | 


Ciphertext: 
ENOHH RNKAI TEESC LSEMA HLIYP IEXTP NITAR GGHXX 


(3) The deciphering cryptographer must now perform the additional step of deter- 
mining which columns will be longer than the others. With 38 letters and a 
given width of 7, dividing 38 by 7 produces 5 with a remainder of 3. This means 
that the basic column length is 5, but the first 3 columns are 1 letter longer. 
Sometimes, cryptographers will avoid this additional step by padding message 
texts so that the bottom row is always completely filled. 


— 
co 
a 


The solution of these systems is extremely easy. The security depends on just 
one number, the matrix width. All you have to do to solve a message enciphered 
a simple columnar transposition is to try different matrix widths until you find 
the right one. To try each width, hes just do exactly what the decipherin 
cryptographer does. Divide the total length by the trial width and the result an 
remainder will tell you the basic column length and how many longer columns 
there are. 


If you suspect that only completely filled matrices are being used, the solution is 
easier. You only need to test widths that evenly divide into the message length 
in that case. For example, with a length of 56, you would try widths of 7 and 8. If 
neither of these worked, you would also try 4, 14, 2, and 28 to cover all 
possibilities. It is better to try the possibilities closest to a perfect square before 
you try very tall and very wide matrices. 


— 
o1 
= 


. Numerically-Keyed Columnar Transposition. Numerically-keyed transposition 
systems are considerably more secure than simple columnar transposition. You 
cannot exhaust all possibilities with just a few tries as you can with the simple 
systems. The transposition process is similar to that used to produce transposition 
mixed sequences. 
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(1) The numerical key is commonly based on a keyword or key phrase. Unlike 
keywords used to produce mixed sequences, the keyword may have repeated 
letters in it. To produce a numerical key from a keyword with repeated letters, 
the repeated letters are numbered from left to right. 


(2) As with simple columnar transposition, matrices may be completely filled or 
incompletely filled. In either case, the plaintext is written horizontally and the 
ciphertext is extracted by column in the order determined by the numerical key. 
The following example shows an incompletely filled matrix. 


5614 3 2 


Ciphertext: 
QECSI SFEME ENMMT UIEIA RTONE LERRT DYXXX 


(3) The decipherment process for the receiving cryptographer is more complicated 
than with simple columnar Eel beau The cryptographer must decide the 
column lengths, as before. With the above message, the cryptographer divides 
the length of the message by the length of the numerical key. In this case, 32 
divided by 6 is 5 with a remainder of 2. The basic column length is 5 with two 
longer columns at the left. The cryptographer then sets up a matrix with the key 
at the top and marks the column lengths. 


5614 3 2 
ORANGE 


(4) The ciphertext is now entered by columns according to the numerical key to 
produce the plaintext. 


(5) The solution of numerically-keyed systems is more complex than oe simple 
columnar Sea It is more than just trying all possibilitie olution 
of numerically-keyed columnar transposition is explained in Chapter | 


11-3. Route Transposition 


There are many other ways to transpose messages than columnar transposition using 
squares and rectangles. The shape of the geometric figure used can be varied, and the 
method of inscribing and extracting text can be varied. Columnar methods are the 
most common in military usage, because they are the easiest to learn and use reliably, 
but other methods may be encountered. Some of these common methods are shown 
below. 


a. Route transposition using other geometric figures. 


(1) The rail-fence cipher is inscribed by zigzag pattern and extracted by rows. 


Ciphertext!: NMRGI FEEAR NNEOC NSIIO RRTVW 


(2) The triangular pattern is inscribed by rows and extracted by columns. 


R]t[v]t IN fc Jn fo} ] 


Ciphertext: 
RMIFE VEONI RIRTN NCSGE ANROW 
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b. The next examples show just some of the possibilities for route transposition using 
squares or rectangles. Each example is based on REINFORCEMENTS ARRIVING 
NOW to help you see how the route was entered. The route can be: 


(1) Inscribed by spiral, out by columns. 


Ciphertext: 
RRAST ERONN IIWGE NVINM FORCE 


(2) Inscribed by diagonals, out by alternating rows. 


Ciphertext: 
RIOMA VSEFE NCTIG ONRNR ERINW 


(3) In by outward spiral, out by alternating diagonals. 


Ciphertext: 
NIGNR VIOCO WERFR RNEME IASNT 


(4) In by L-pattern, out by spiral from lower right. 


Ciphertext: 
ECROF NIERR ROWGN MENTS AINIV 


c. Completely filled squares or rectangles are more common with route transposition 
than with columnar transposition. The reason is that it is often difficult for the 
cryptographers to figure out how to handle an incompletely filled matrix. It is sim- 
pler in as to completely fill each matrix than to provide rules to cover every 
incompletely filled situation. 


d. The solution of route transposition is largely a matter of trial and error. When you 
suspect route transposition, see if the message length is a perfect square or if the 
matrix can be set up as a com cee filled rectangle. Then try entering the cipher- 
text by different routes, and look for visible plaintext by another route. 
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CHAPTER 12 


SOLUTION OF NUMERICALLY-KEYED 
COLUMNAR TRANSPOSITION CIPHERS 


12-1. Completely Filled Matrices - Determining 
Matrix Size 


When completely filled matrices are known or suspected, the first step in their solution 
is to detemning the matrix size. As discussed Nhaper for ane columnar 
transposition, the correct width must be an even divisor of the message length. With 
simple columnar transposition, the correct width could be confirmed easily, because 
plaintext will appear on the rows when the width is correctly selected. It is not as sim- 
ple with numerically-keyed transposition. Although each row will contain the letters of 
plaintext for that row when the width is correctly selected, the letters will be out of 
order. The key to recognition is the vowel count on each row. Vowels should appear 
consistently with fairly even counts on each row when the correct width is tried. In 
plaintext, vowels appear about 40 percent of the time even in small samples of text. 
This is necessary for text to be pronounceable. If some of the rows have too many or too 
few vowels, you probably have the wrong width. Consider the next cryptogram. 


ERESO RIERU GRFPT TEOAE OOSNN MNIEU SDEES MTSUR FYSBW TEARC 


EUXRQ GXXXX 


a. The cryptogram has 56 letters, assuming the final Xs are all nulls. If a completely 
filled matrix is suggested by past experience, then the matrix is probably either 7 or 
8 letters wide. Write the cryptogram by columns into a trial matrix of each width 
and count the vowels in each row. 


NY WN WY WwW WY Ww Ww 
ww FN FN 


b. The first matrix, with a width of seven letters, has the more regular spacing of 
vowels. The letter Q in the first matrix also has a U on the same row, whereas the 
second matrix does not. The first matrix is clearly the better possibility. 


12-2. Matrix Reconstruction by Anagramming 


Continuing the same problem, the object now is to rearrange the columns into the 
original order. The rearrangement of letters to find the original plaintext order is called 
anagramming. You may be able to see possibilities for complete words on some of the 
rows, but the Q and the U on the seventh row provide the most obvious starting point. 
To recover the numerical key at the same time, number the columns in numerical 
order before starting reconstruction. 


a || — 
GIES 

< | 
DILIGIES 


LO |o[m[>| 
= 
= | 

EC 


pola 
RIGIG 

| 

a 
LRAES 


jm |= [alo | 
ae jo |r| 


|Z [a 


a. All the letter combinations produced by placing columns 7 and 5 together look 
reasonable for plaintext. At this point, you can see that the last two rows should 


both be followed by vowels. Both the 1 and 6 columns end with two vowels. Here is 
what each looks like when added to the initial two columns. 


nN 


lo |a|x |e |m[o [a] ~ 


cod ES RS ie 


a] 
> 


b. Both possibilities give good plaintext letter combinations, but at this point, several 
words are suggested in the second match. REF.. ..CE could be part of 
REFERENCE. XTW could be part of SIX TWO, and the UMB in that case would 
eee NUMBER. With these probable words, clearly column 3 follows 756. 
Column 7 is the left-hand column, because the letters needed for REFERENCE, 


SIX, and NUMBER are on the row above in column 4. Adding columns 3 and 4 
produces the next matrix. 


c. The remaining two columns are easily filled in to complete the solution. 


7356321 4 
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12-3. Incompletely Filled Matrices - Hat Diagrams 


Incompletely filled matrices are also solved by anagramming, but it is a more difficult 
process because you cannot initially tell which letters are on the same row with each 
other. If you know or can correctly assume the width of the matrix, you can limit the 
possibilities. Consider the next cryptogram, which is expected to have a matrix width 
of eight letters. 


EARTR RGHRE TALOA OXUWA UETNE IOTAE ROCTT EROTE EAOSN GHNRD 


SEDOO TELHT COEAI TONQR DIMSF EXXXX 


a. With a length of 76 letters and a suspected width of 8, there must be four columns 
with 10 letters and four columns with 9 letters. We can show the range of letters that 
could be placed in each column by trying the first four columns as the longer 
columns and alternately, the last four columns as the long columns. The true 
arrangement is a neither, but it will serve to show the possible range of first 
and last letters for each column. 


PEJE|w|T[R[HTE[O | 
[Alt] Ala [o[N|L[N | 


GIXIOIRIHITIILS 
Hlult[o[nfe|r |r| 
R[wlalt{R|Lfofe | 
elafefel | TT | 


oe ee oe One oe) 


Hl x/1[t]s[ofals | 
Riufofe|Nfof alr | 
ELT TY def arte | 


b. These two extreme situations can be combined into a single diagram, called a hat 
diagram. It is constructed by using the first diagram. Next, combine the letters that 
the second diagram shows can precede the already listed letters by adding them to 
the top of the first diagram. Similarly, draw a line across the bottom of the first 
diagram to show the possible bottom letters. The altered first matrix is now the 
completed hat diagram. 
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elolilelclolahe 
}c/xfolr[afr |i [s | 
HlufT]o[N E| 
eiwlalr [Rt [ole | 
Efalele! | | I | 


c. The completed hat diagram can now be used as a guide to show how columns may 
be aligned together. Its value can be seen if you try to place the Q in the text before 
aU. There are two Us in the cryptogram. The Q is necessarily near the top of the 
matrix. The U in column 2 can only be at the bottom of the matrix. The U in 
column 3 can only be at or near the top of the matrix. The correct U to place with 
the Q is now obvious. Lining up the Q in column 8 with the U from column 3 
produces an initial reconstruction. 


ja ju |z|~|o|a]o[zlo}e 
Fea eS ae 
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d. Next, there is an X near the bottom of the matrix in column 2. It will combine well 
with the SI of the first two columns to produce SIX. 


e. SIX is not the only number near the bottom of the matrix. FOUR and TWO are 
likely on the last two rows, and column 4 is available with RO near the bottom. 


[4jo[=[m [2] almlc|>|a]u 
a[c[xfol>fol[e[>[alm|n 
oe ialolo [am [>| + 


[m|ajulz{=lo}@]o}z |o]e 


f. The E after SIX suggests EIGHT. The numbers themselves suggest the word 
COORDINATES, which appears in the middle of the matrix. With these words 
written in, the rest of the columns can be placed. 
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83247516 


g, All letters are now used, but several letters appear at both the top and bottom of the 


matrix. The first word of the message is ALTERNATE, and the letters before it all 
appear correctly at the bottom of columns. The L at the bottom after ONE correctly 
sora as part of ALTERNATE at the top. Removing the duplicated letters and 
shifting ALTERNATE to begin at the left-hand column completes the solution. 


jofs [1 [x] 


| 
R[t [afr fefe [Tw 
jofoinfel | | 


}=|>|mo]o fala ir|~ 
[ol Z[ujol>[mim[alu 
EIIEIEIBIEIES 


mj alalololatm [>] 
= | 
— 
| 
LO | 
Cc 


h. This solution depended on correctly ee the width of the matrix and the 


fortunate appearance of the Q and U. Without the Q and U and without any 
indication of the width, a great deal more trial and error would be required for a 
successful solution. Hat diagrams can be constructed for different possible widths, 
for example, and probable words searched for within the structure of the diagram. 
The solution is still possible in most cases, although it will often take longer than 
the example did. When the same keys are reused _for.a period, special situations can 
arise which make the solution much easier. The next chapter shows the techniques 
that can be used in these special situations. 


TRANSPOSITION SPECIAL SOLUTIONS 


13-1. Special Exploitable Situations 


Military forces are rarely equipped to change cryptosystem keys with every message 
transmitted. The logistics and management problems of providing enough different 
keys and controlling their use are difficult to handle. Normally, keys will be reused for 
a period before they are changed. With transposition systems, several special situa- 
tions can arise when keys are reused that make a solution possible when the system 
might otherwise resist successful analysis. One of these situations arises in columnar 
transposition whenever similar beginnings and endings are used with the same width 
matrix. The keys do not have to be the same in this case as long as the width is the 
same. Another more general situation occurs whenever two or more different messages 
of the same length occur using exactly the same keys. Each of these situations is 
explained in the following paragraphs. 


13-2. Similar Beginnings and Endings 


With columnar transposition, repeated message beginnings or endings can cause an 
easily recognizable and exploitable situation. When the same width keys are used and 
the beginnings are the same, the tops of the columns in each message will consist of the 
same iets When the length of the repeated beginning is several times as long as the 
width of the matrix, these repeated letters are easy to spot. 


a. The next two messages demonstrate the techniques that can be used when similar 
beginnings are encountered. Repeated segments between the two messages are 
underlined. 


Message 1: 
ASOLI LBOAE WDLIR ACIEL NSAIR IEDLS NDWND TONIH UAOTL FMLIF 
4 5 


1 2 3 
AMPES DBREU_SCEPV NELOM YEODC SHCAI TIELT MNAEE IDERA 
6 7 8 


Message 2: 
QNILB TSROI RRIEP LIHUE OZYAS OLSUT ARZEO LTMUI MTQBR OAUSC 
| 2 5 


3 4 
IEEHT RXOLI RSWBO DSERD EODPL TIAFS EIFAE SDEEE ZT 
6 7 8 
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(1) There are eight repeated segments in each, which shows that the messages are 
each eight columns wide. The repeated segments are not in the same order, 
which shows that the two messages use different numerical keys. 


Message 1 has 95 letters. Dividing 8 into 95 gives 11 with a remainder of 7. This 
means that all but one column must have 12 letters. The distance between 
repeats shows that this is true. All segments have 12 letters except for the fifth 
segment, which has 11 letters. The fifth segment, beginning IFA, must be the 
right-hand column of the matrix. 


— 
No 
> 


(3) Message 2 has 92 letters. Four columns have 12 letters and four columns have 


11 letters. 


= 


(4) All repeated segments contain three letters except for the ASOL segment. The 
column beginning ASOL is probably the left-hand column. 


(5) Asa result of these observations, we can place the first and last columns in each 
matrix, and we can pee the middle six columns into two groups of three, 
based on the length of the columns in message 2. 


Message 1: Message 2: 
1382 467 #5 


(6) Completion of the solution from here is straightforward. Anagram each group of 
three columns in each mess age, and the solution is complete. The similar begin- 
ning is ALL REQUISITIONS FOR MEDICAL. 


. Messages with similar endings, such as a repeated signature block, show repeated 


segments which represent the bottoms of columns instead of the top. The solution is 
approached the same way, except that the text will not necessarily appear in the 
same columns in both messages. 


13-3. Messages With the Same Length and Keys 


Whenever two or more messages have the same length and are transposed with the 
same keys, they can be solved together. The more messages you find that are the same 
length and use the same keys, the easier they are to solve. This technique can be used 
regardless of the type of transposition system. 


a. Solving messages with the same length and keys is particularly effective with 
columnar transposition. The next example shows how the solution can be 
approached. The five messages all use the same keys. Their positions have been 
numbered for easy reference and to aid in key recovery. 


1 b£tid?drd 2 tt’s2 22222 

12345 67890 12345 67890 123 4 5 
Message 1:L PQRY TTLPU ARRS I UEDEO ETSRE 
Message 2;Q SNE T BBUHB HRSMD REDAA OAEEE 
Message 3;}3AQOEEW OVGUC MTNIS FRDER ESOTE 
Message 4:1 OOOE ODNRN NNPOH TTYGE TTWRA 
Message 5:J NUOT EKUFR RCVAD OONNI TAIFE 


(1) The Q in message 2 in position 1 must certainly be followed by the U in 
position 8. 


(2) Position 1 must be at the top of a column in the original matrix, since columns 
are extracted beginning at the top. Position 8 is also probably at the top of a 
column. This applies not just to message 2, but to all five messages. The 
position 1 column can be written next to position 8. 


C2 Cc PT loo 


(3) Position 2 must be from the second row of the matrix. If position 8 is from the 
top row, then position 9 must be from the second row, also. Similarly, positions 
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3 and 10 are from the third row. Positions 4 and 11 are from the fourth row. Posi- 
tions 5 and 12 are probably from the fifth row, although these are short messages 
and there might not be as many as five rows. 


1 1 1 

1 8 2.9 3.0 4 4 5 2 
Message 1: L L PP QU RA YR 
Message 2: Q U SH NB Eu TR 
Message 3: A G OU EC EM WT 
Message 4: 1 N OR ON ON EN 
Message 5: J U N F UR OR Tc 


(4) Now the task is to find additional columns to add to the fragments already 
started. For example, the QU in message 2 should be followed by a vowel, and 
the most likely letter after JU in message 5 is N. There are three columns with 
an N in message 5, and only one of these, position 19, has a vowel in message 2. 
Therefore, we will add columns 19, 20, 21, 22, and 23 to our fragments. 


1 2 1 2 1 2 12 

138 9 29 0 3 01 4 1 2 5.2 3 

Message 1: L LE PPO QUE RAT YRS 
Message 2: QU A SHA NBO EHA TRE 
Message 3: AGE OUR ECE EM S&S WTO 
Message 4: I NG ORE ONT ONT EN W 
Message 5: J UN N F I UR T ORA TCI! 


All of the fragments produce good plaintext except, possibly, the last one. QUA 
will usually be followed by an R. Of the two columns with an R in message 2, 
column 12 provides the best combinations. 


— 
o1 
= 


1 1 21 121 121 121 

13 9 2 29 03 3014 4 1 2°55 5 2 3 6 

Message 1: L LER PPOR QUE § RAT I YRS U 
Message 2; QUAR SHA 5 NBOM EHAD TRER 
Message 3: AGE T OURN ECE 1 EMS § WTOF 
Message 4. I NGN ORE P ONTO ON TH ENWT 
Message 5: J UNC NFIV URTA ORAD TCI1O 
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(6) All of the matches give good plaintext, except the fifth set, which ory does 
not belong now. It is easy now to see words to build on, such as ARTILLERY, 


QUARTERS or HEADQUARTERS, JUNCTION, SUPPORT, FIVE, and 
others. All of these leads are added to the completely anagrammed messages. 


1 21 11 2 1 21 21 121 21 

1425n'1sga253 62903 64730147 5 8 
Message 1: ARTILLERYSUPPORTREQUESTED 
Message 2; HE ADQUARTERSHASBEENBOMBED 
Message 3}. MESSAGETWOFOURNOTRECEIVED 
Message 4;5NOTHINGNEWTOREPORTONTODAY 
Message 5:ROADIJIUNCTIONFIVEFOURTAKEN 


(7) The final step in the solution is to recover the numerical keys. Looking at the 
beginning, the pattern starts to repeat after seven letters, so the original matrix 
was seven letters wide. The numerical key, derivable by observing the order in 
which the columns were extracted, was 4275136. 


b. The technique of solving messages of the same length and keys can be used with 
any transposition system. It can be used as the basis for recovery of more difficult 
transposition systems such as large grilles and double transposition. The cyclic pat- 
tern of columnar transposition aided the solution of the example above. Given four 
or more messages of the same length and keys, however, the complete messages can 
often be anagrammed without the help of the cyclic pattern. 
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PART SIX 


Analysis of Code Systems 


CHAPTER 14 


TYPES OF CODE SYSTEMS 


14-1. The Nature of Code Systems 
As explained in}Chapter 1} the key feature that distinguishes a code from a substitu- 


tion cipher is thafa code will substitute for words as well as characters. 


far) 


. Codes range in size from small charts or lists on a single sheet of paper to books as 
large as an unabridged dictionary. 


<7 


Plaintext values are replaced by code groups or code words. A code group or word 
may replace anything from a single character to a whole sentence. 


aQ 


. Since codes can compress whole sentences into a small code group, not all codes are 
used for security purposes. Some are used for economy instead, a replacing com- 
mon sentences and phrases with a single group. For example, radio operators use 
Q and Z signals as a brevity code. Q and Z signals are three letter code groups 
beginning with Q or Z that stand for common communications procedures. A single 
code Q or Z signal replaces sentences or phrases such as QSA, My signal strength is 
.. and ZNN, I have nothing now. Operators memorize the Q and Z signals that they 
commonly use and the result is quicker, more economical communications. 


Q. 


. Some codes are used for prearranged messages only. Limited in size and purpose, a 
single code group may be transmitted as a signal to begin a preplanned attack, for 
example. Prearranged message codes are sometimes referred to as pamcodes. 
Prearranged message codes may also take the form of innocent communications, so 
that an apparently harmless message contains a secret meaning. The message, Les 
sanglots longs des violons de l‘automne, a harmless sentence in French, signaled the 
French underground in World War II that the Allied invasion of France was to begin 
soon. Codes with an innocent appearance but a secret meaning are known as open 
codes. 
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e. Prearranged message codes can only be used for limited, preplanned purposes. 
General purpose codes which can be used for any communications are more com- 
mon. All general purpose codes must include within them, a provision for spelling 
words that are not included in their vocabulary. Even when very large book codes 
are used, proper names will sometimes need to be encoded that are not in the code’s 
vocabulary. General purpose codes thus share some of the characteristics of sub- 
stitution ciphers. 


f. Codes are at their weakest when they are used to spell words. Most codes are broken 
into through spelling. Large codes attempt to defeat this weakness by providing 
many variants for letters and common syllables. The letter E might be encoded by 
10 different code groups in a large code, for example. Other code groups would repre- 
sent common syllables with E in them like RE, ER, EN, and ENT. In this respect, 
codes are similar to syllabary squares, and the initial approach to analysis can be 
similar between syllabary squares and codes. 


g. When a high degree of security is required using codes, there are two approaches to 
increasing the security of codes. One is to use very large book codes, since the larger 
the code, the more secure it is. The other is to further encipher the code to produce 
an enciphered code. Any of the cipher procedures discussed earlier in this manual 
can be used, but the most common is to use polyalphabetic encipherment. 
Repeating keys and long-running keys may be used. It is one way to combine the 
advantages of brevity with the added security of polyalphabetics, although such 
procedures are time-consuming to use. They cannot be used practically in rapidly 
changing combat situations, for example, when speed of communications is impor- 
tant. Large codes and enciphered codes were common earlier in this century when a 
high degree of security was desired. Today, with advances in electronics, cipher 
machine and computer based systems are more common when a high degree of 
security is required. 


14-2. Book Codes 


Codes too large to be printed on just one or two pages are called book codes. They may 
range from small pamphlets to large bound books. 


a. The code values in book codes may consist of letters, numbers, or a combination of 
letters and numbers. Usually, the code groups are a constant length, but there are 
occasional exceptions. Code values used primarily for voice communications will 
sometimes consist of pronounceable words rather than regular length groupings of 
characters. We will a2 to only code groups in the rest of this chapter and the next, 
but " should understand that comments about code groups also apply to code 
words. 
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b. The simplest book codes consist of a single orderly listing of code groups and their 


meanings. The code groups are listed in the book in alphabetical or numerical 
order, and their meanings are also in a logical order. This single listing is used for 
encoding and decoding, and is called a ed ed code. The plaintext values may be 
strictly alphabetical in arrangement or may be separated into separate sections for 
words, letters and syllables, and numbers. Occasionally, they will be arranged 
topically with such things as units in one section, weapons systems in another, 
place-names in another, and so on. The key feature of one-part codes is that when 
the code groups are listed in order, their plaintext meanings will also be in a logical 
order. A sample portion of a one-part code is shown below. 


CODE GROUP: PLAINTEXT: 


AEJ ACCIDENT 
AFL ACTION 
AGN ACTIVE 
AHP ACTIVITY 


. The orderly structure of one-part codes makes them easy to use, but greatly reduces 


their security. The analyst can use the structure to narrow down possible meanings 
for code groups. More secure codes are randomly arranged, and are necessarily 
printed in two parts. One section lists the code groups in order, and it is used for 
decoding. The other section, containing exactly the same information, lists the 
plaintext values in order, and is used for encoding. This type of code is called a two- 
part code. Portions of the encoding and decoding sections of a two-part code are 
shown below. Note that one group occurs in common between the two parts. 


ENCODING SECTION: DECODING SECTION: 
KTOL A ABAB RES I STANCE 
YNIF A ABEC SIZE 
ACEJ AB ABID CHEMICAL 
VAUW ABANDON ING S ABOF T-72 
WHOD ABILITY ABUG QUAL ITY 
AOUT ABLE ACAH 15 
LWOQ ABLE TO ACEJ AB 
TEER ABOUT ACIK VERIFY ING S 


14-3. Matrix Codes and Code Charts 


Small codes can be conveniently printed in the form of a small coordinate matrix 
system. 


a. Typically 10 by 10 or larger, matrix codes, also known as code charts, can contain 


letters, syllables, numbers, and a small vocabulary of words. They are very easy to 


use, and communicators can be trained in their use quickly and easily. They also of- 
fer more security than most simple ciphers. 


b. Code charts are easily changed from one cryptoperiod to the next by simply chang- 
ing the coordinates, while retaining the same matrix. 


c. They are 
shown in 
it would 


a very close relative to the syllabary square cipher. If the syllabary square 
Chapter 5|contained some words as well as letters, syllables, and numbers, 
be a code instead of a cipher. 


d. One type of code chart places two plaintext values in each cell—an upper value and 
a lower value. The lower values are all words. The upper values are all numbers, 
letters, or syllables. Two of the cells are set aside as shift values to indicate whether 
to read the upper values or lower values in the code groups that follow. A sample 
chart of this type is shown in Figure 14-1. This example uses letters for coordinates, 
and has variants on each row and column. The word ARTILLERY, for example, 
could be encoded as TF, TI, QF, or QI. The cells MU and UU are begin and end 
spell indicators. The bottom values in each cell are used until a begin spell group is 
sent. Then the top values are used until the end spell group is used to shift back to 
the lower values. 


ec ive, 


aD 
Addin, Aes d, pon 
ivity, 9 ing, $ ive (ly), 5 
ie al, pon aS ck, ed, “Avent "Betalion, Mepattery, exit, Semb, ed, er Sidse. d, Cont: d, 
Armor, ed d, ing, s aad d, ing, 6 ing, s , ing, s ies ed, ings, § ing, s ing, 5 ing, 5 
cH co OE 
id Tess aes icete, Leela. Concentrate,| Contact, Coordinate, Oo einadk Cross, ed, Ptendide- Delay, ed, 
et, ing, 3 | d, ing, ion, 8) d, ing, ion, s}d, ing, ion, ed, ina,s Jd, ing, ion, s| Corps ed, ing, s es, ing fense, s (of) ing, 8 


18 ED ER ERS est 
Encounter, Entisted Equip, ment Trai: d,| Est lea 
ing, ‘ ment (ol), s| d, ition, ry East (of) ed, ing, 3 ped, ping ing. ing, 8 aH 
HE 1 
Forward Guns Hashhave 
i aM inom, ation, Invalt, ation, 
ing, i Infantry ed, ing; ed, ing, § 
i ” d, Ma hi ve ed, 
ate, 4 ine ID, Pi 
= (of) oe ion, $ (news ping, 
nor T 
NA otno- M Olas; Occupy, edt perate, d, Geer, od 
thing/negat lation, d,ing,s| ies, ing ing, ion, s ing, § 
on, ned, Point, ed, ing oon ed, PPrcpare, d Froteed, as “Bata 
, ing, ion, 1] ning, $ (to) | Platoon, s Position, 1 ing, 5 ation, ing, $ ing, 4, Radio, ed, s} Railroad, s 
RED 
Ready ae d,ing, Racsarei: Refer, ence, Reinforce, d, Repl d, BS ort ed, (ee ed] Require, d, 
(tor) (to) sireceipt sance red, ting, » (to) ing, ment, s |ing, ment, s ing, 3 ing, 6 ing, isition,s 
so TH 
Send, ing, Teel, ed, Tall TEbenath, ‘ He. ped, Supelp. | ies 
sient (to) ing, 4 Small aia South (of) Squad, s _e ping, $ ¢ 
nian ed, 


ing, 
Paiied Comma spans =] Dash — Paren () 
Withdraw, 
Whatiwho When at, ing, s Woods Phase Go) Yesterday You,r Zone, 3 (of) 


Figure 14-1. Sample code chart. 
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CHAPTER 15 


ANALYSIS OF SYLLABARY SPELLING 


15-1. Identification of Syllabary Spelling 


The key to breaking into codes and syllabary ciphers is to identify and exploit 
2 reeel spelling. If possible, try to locate instances where the same word is spelled in 

ifferent ways by combining the syllables and letters in different combinations each 
time. This situation can be exploited fairly easily. 


a. Identifying repeated syllabary spelling in syllabary squares was demonstrated in 
Chapter 5 


om 


. In codes, only certain groups represent letters and syllables, but these tend to 
cluster together. With code charts, if begin spell or letter shift groups are used, 
identifying these special purpose groups serves to point right to groups used for 
spelling. Often begin spell-end spell groups or letter shift-word shift groups are the 
highest frequency groups and tend to alternate in the text. This makes them quite 
easy to spot. 


. Incodes where no shift groups are used, the code groups that represent letters and 
syllables tend to cluster together, just as code ee that eats numbers do. If 
necessary, computer produced indexes of code groups and the code groups they 
appear with will help to isolate those used for spelling. 


aQ 


15-2. Recovery of Syllabary Spelling 


By comparing different spellings of the same word, you can often figure out which 
groups represent single letters and which represents syllables. Then, the groups which 
represent syllables can be replaced by groups that represent single letters. Reduction 
to single letter terms, in turn, enables recognition of word patterns. This approach to 


recovery of syllabary spelling applies equally to syllabary squares, code charts, and 
book codes. The segments clone each of which represents the same plaintext, 
illustrates how spelling can be recovered. 


A: 81 35 25 74 60 60 11 54 88 88 14 28 
B: 83 29 60 60 11 59 88 14 28 
C: 81 35 29 60 60 11 59 88 11 60 25 35 


D: 83 25 76 60 11 59 88 14 25 35 


a. The first three segments all include the text 60 60 preceded by two, three, or four 
dinomes. If we suppose that the four dinome spelling is all single letters because it is 
longer than the others, then the two dinomes in segment B must each represent 
digraphs. Segment C with its three dinomes helps to confirm this breakout. 


b. Similarly, segments A and B end with 88 14 28. Segment D ends 88 14 25 35; 
therefore, 28 must equate to 25 35. 


c. Similar comparisons show that 14 equates to 11 60, 59 equates to 54 88, and 76 
equates to 74 60. 


d. We now take the first segment, for example, and replace all the dinomes that 
equate to two other dinomes with the single letter equivalents. 


Segment A: 81 35 25 74 60 60 11 65 88 88 14 28 
“N “N 
Replacement: 81 35 25 74 60 60 11 54 88 88 11 60 25 35 


e. Reduced to single letter terms, the word pattern for the replacement segment is 
-ABCDDEFGGEHBA. This word pattern equates to the word KECON- 
NAISSANCE. 


f. These recoveries can, in turn, be used to recover additional plaintext. Whether the 
system is a syllabary square, a code chart, or a book code, the initial entry is the 
hardest part. Once the first confirmed recoveries are made, follow-on recoveries are 
easier. 


g. The example above depended on finding sufficient repeated text to reduce the seg- 
ments to single letter equivalents. This will not always be possible, but it is only one 
of the approaches an analyst can use to aid in recovery of the system. Anything that 
provides clues to the plaintext can help solve the system. Information from other 
sources such as traffic analysis and direction finding can help. Traffic passed in 
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other systems may provide isologs or clear clues to the content of the text. If the 
code is a one-part or uses an orderly matrix, the orderliness itself is a major aid in 
recovering plaintext. Encoded numbers may also help. 


15-3. Recovery of Numbers 


Another vulnerable point of entry in syllabary squares and codes is encrypted num- 
bers, as has been demonstrated with other systems. Numbers, whether spelled out or 
encrypted by direct equivalents tend to occur with each other. Grid coordinates will 
typically occur in groups of four or six digits. Times are usually four digits, and tend to 
be rounded off into multiples of 5, 10, or 15 minutes. Times always begin with 0, 1, or 2. 
The third digit of a time 1s always 5 or less. Because of these characteristics, it is often 
quite easy to recognize the equivalents of 0, 1, 2, 3, 4, and 5. Even when variants are 
used, they tend to stand out. Given these six values, others readily follow. Recovered 
grid coordinates, in turn, give major clues to the rest of the text. Numbers like 7.62 
(millimeter), 47 (AK-47 rifle), 45 (caliber), and 72 (T-72 tank) all provide clues to 
surrounding text. 


15-4. Recovery of Words 


Initial entry into code systems is often made through the elements that are most like a 
cipher. vat out words and encoded numbers are the weakest points in a code. Once 
these cipher-like groups are recovered, making further recoveries depends on recogniz- 
ing the meaning of code groups that represent words and phrases. Slightly different 
skills are required to recover the vocabulary of a code than are required for ciphers. 
Cipher analysis tends to be more mathematical in nature. 


a. Code recovery is more related to language skills, particularly when the text is not in 
English. Although words can be recovered as their English equivalents, the actual 
foreign language words must be known to take advantage of any alphabetic struc- 
ture in the code. In languages where the sentence structure varies from English, the 
characteristic structures must be familiar to make sense of the code. 


b. Codes are less apt to be fully recovered than ciphers. Code groups cannot be 
recovered until they are used, and large codes may contain many groups that 
remain unused for a long time. Each code group must be observed in use several 
times before its plaintext value can be confidently assigned. Errors are very com- 
mon in encrypted traffic, and a group must be reused several times just to be sure it 
is not in error. It also takes repeated usage, in many cases, to be sure which of 
several words with similar meanings represent a particular code group. Recovery of 
book codes may never be completed, even when most text becomes readable at an 
early stage. 


GLOSSARY 


SOI 


T™ 
TRADOC 


USAISD 


Z 


Glossary-0 


American standard code for information interchange 
ciphertext 

Communications-Electronics Operation Instructions 
communications intelligence 

carriage return 


Department of the Army Pamphlet 


encipher below, decipher above 
encipher right, decipher left 


figure 
field manual 


index of coincidence 


line feed 
letter 


military occupational specialty 
number 

plaintext 

Signal Operation Instructions 


technical manual 
United States Army Training and Doctrine Command 


United States Army Intelligence School, Fort Devens 


Zulu 


APPENDIX A 


FREQUENCY DISTRIBUTIONS OF 
ENGLISH DIGRAPHS 


Frequency distributions of English di craps appear in 50,000 letters of government 


plaintext ‘telegrams, reduced to 5,00 


digraphs 


Table A-1. Frequency distribution digraphs. 


TOTAL 


lets fo elo To bots talelel ata Poofefo[> [51 fol fe 


fHJ20/ 1 | s [2 fzol s] | ff | fafa] s [20] pet [oy fat fey 
fafa teal efobielel TL Palenpe festa ete fasart fest el ape 
isles else e (ae ola le sles salsa 
IN [26] 3 [ro] s2[ 57] 9 [a7[ [so] a [as [s[eluel sti | [oeleal 7] [al fs] foo 
}Ol7[ [|e a }asja[a|s[s| 2] wlas| 77] 6 [as] [oe] le a7] zl ats ia 

ies eles aaa S| ete 8) ee eee ea | a 
tees eee eee cere eee 
Baie ee Jeb wot th) 
PS [ze] 3 [| ENCE RIESENES [eT foey 
ts efetnlselal[ [eels el fe 
ep tb ae 
Wiel a a 


es alae ela aisle ioe ao ae laa = 


A-1 


Table A-2. The 428 digraphs of Table A-1, arranged according to their absolute frequencies, 
accompanied by the logarithms of their assigned probabilities. 


Lio |b 224 E Loog F IL yo |h204 F - Long 
(F) | QF) ie (2F) (F) 1](2F) (2F) 


12}1.08}.58 
12)1.08}.58 
12}1.08}.58 
12)1.08}.58 
12/1.08].58 


11/1.04}.56 


11/1.04].56 
11]1.04].56 


‘The 18 digraphs above this line compose 25 percent of the total. 
2The 53 digraphs above this line compose 50 percent of the total. 
®The 117 digraphs above this line compose 75 percent of the total. 


A-2 


bio [boog 

(F) | (2F) 
NN......... 8/0.90].51 
OC fb eecetess 8/0.90].51 
OW ........ 8/0.90).51 
PT pscihe. 8]0.90}.51 
UG... 80.90.51 
AN Sidsceai 7/0.85].48 
BY ossssscess 7/0.85).48 
@) errr 7/0.85).48 
EH......... 7)/0.85}.48 
EW seeaess 7}0.85}.48 
EXeessisits 7|0.85).48 
GA escesis aus 7)0.85).48 
IP eouanigeke 7 0.85 4 
NU... 70.85 48 
OA wee 7/0.85).48 
OV... 7}0.85}.48 
RG... 7/0.85).48 
RN......... 7/0.85).48 
TR tie tesixs 7|0.85).48 
AEN Segui ces 7/0.85).48 
MT ickeestes 7)/0.85).48 
AB......... 6]0.78}.45 
AG uu... 6)0.78).45 
BL... 6/0.78).45 
GO wise 6)0.78}.45 
|B rrr 6)/0.78).45 
KB......... 6)0.78).45 
LS.......... 6/0.'78].45 
MB........ co. 
OO sien 6[0.78].45 
Ph gens 6/0.78).45 
PS .eeeiients 6/0.78).45 
RE was 60.78}.45 
TC ......... 610,781.45 


Table A-2—Continued 


Lig [boos 

(F) |(2F) 
DP viecieess 510.70].42 
DU......... 510.70].42 
BA se ecteced 510.70}.42 
Gheseis 50.70.42 
GR......... 510.70;.42 
HF ......... 5}0.70/.42 
NDEs 2sasest 5}0.70}.42 
NM........ 5]0.70].42 
NY sievsetss 510.701.42 
OD wee 5]0.70}.42 
RE evsacaes 510.70}.42 
RU... 510.70).42 
RV ......... 5 oof 
SD i. 510.701.42 
SReetles. 5|0.70}.42 
"Flbisacedectes 5|0.70].42 
PU eaess 5]0.70).42 
UA... 50. 70].42 
UL... 5}10.70].42 
UM ........ 5}0.70].42 
AF ......... ‘410.60].38 
BA ......... 410.601.38 
BO waessis 410.60].38 
CRs eck 410.60}.38 
GOR, cseauce: 4)0.60}.38 
CU vxeeicst 4\0.60].38 
DB......... 4|0.60].38 
DC xis 410.60].38 
DN......... 410.60].38 
DW ........ 4|0.60].38 
EB......... 4|0.60}.38 
EG......... 410.60].38 
| Ds Goer 4|0.60].38 


F [hyo fbopa 

(F) |@F) 

SW......... 410.60].38 
WH........ 4,0.60}.38 
VG seins 410.601.38 
VD io scree 410.60/.38 
VRissssoce 4|0.601.38 
AA vent ae 3]0.48).33 
AW ........ 310.48].33 
Ces eeayes 3)0.481.33 
Dliscet e238 3}0.48].33 
DV ie avs 3]0.48].33 
101 6 bereeeeee 3]/0.48].33 
FS.......... 3/0.48).33 
FU ......... 3 oa 
GN... 310.481.33 
GS acct 3/0.48}.33 
HCs 7.3.3 3}0.48}.33 
HN......... 3}0.48].33 
LB eeteets. 3}0.48].33 
| Dy Ore 310,48].33 
LE secre res 3]0.48}.33 
Poe cctese 3 310.48].33 
MC ........ 310.481.33 
NP saceeag 3/0.481.33 
NV secs ios 3}0.481.33 
NW........ 3}0.48}.33 
OE......... 3/0.48].33 
OH......... 3]0.48].33 
PH......... 3}0.48].33 
PUrcnale 3/0.48].33 
RH ve e.ceret 3/0.48].33 
SBevccccunees 3/0. 481.33 
SM......... 3/0.484.33 
TBecactta' 3/0.48].33 
UB....... .. 310.481,33 


Lio | Loo4 

(F) | (2F) 

BR ies cccves 210.30].25 
BU......... 210.30}.25 
DG nigaaes 210.30).25 
DH......... 210.30).25 
DQ......... 210.30].25 
| Canara 210.30].25 
FL.......... 210.30}.25 
GOs seceue 210.301.25 
GF ......... 210.30}.25 
GLiesciccct 210.30].25 
GPisckon, 210.30].25 
GU. escesee 210.30).25 
| HD......... 2 oa] 2 
HM......... 210.30).25 
TB ccs 210.30].25 
| 0 anorerenne 2/0.30].25 
| Aaron 2|0.30].25 
5 210.30}.25 
DO eerste 210.30].25 
JU iieas cacdes 2|0.30}.25 
Kliccste. 210.30}.25 
| OF.) Conn 210.30].25 
TGR: esceeist 210.30).25 
| 0 aero 2/0.30].25 
DiVeeaii eee 210.30].25 
LW......... 210.30].25 
MR........ 2/0.30].25 
MT ........ 2}0.30].25 
MU ........ 2|0.30].25 
MY ........ 210.30}.25 
NB......... 210.30).25 
NK......... 2/0.30).25 
OG 2/0.30].25 


Table A-2—Continued 


Table A-3. The 18 digraphs composing 25 percent of the digraphs of Table A-1, accompanied 
by the logarithms of their assigned probabilities, arranged alphabetically according 
to their initial letters. 


(1) ACCORDING TO THEIR INITIAL (2) ACCORDING TO THEIR ABSOLUTE 
LETTERS FREQUENCIES 
F [Lio [heed F Lig F lyg (Long 
(F) | (2F) (F) (F) | (2F) 


ED sie 60) 1.78).88 
EN...... 1112.05.99 
ER........ 87}1.94].94 
ES tsesiex 541.731.86 
IN eeeecseaice 75{1.89).92 


ND........ 52/1. 72).85 
NE........ 57] 1.76].87 
NY oes scans 82(1.91].93 


Table A-4. The 53 digraphs composing 50 percent of the digraphs of|Table A-1, accompanied 
by the logarithms of their assigned probabilities, arranged alphabetically according 


to their initial letters. 


(1) ACCORDING TO THEIR INITIAL (2) ACCORDING TO THEIR ABSOLUTE 
LETTERS FREQUENCIES 


Table A-5. The 117 digraphs composing 75 percent of the digraphs of|Table A-1| accom- 
panied by the logarithms of their assigned probabilities, arranged alphabetically 
according to their initial letters. 


(1) ACCORDING TO THEIR INITIAL LETTERS 


F [Lig | hoo4 
(F) | (2F) 


A-7 


Lig | hea, ‘ Long F [Lio | Lead F [hyo | boog 
(F) | (2F) i (2F) (F) | (2F) (F) | (2F) 


Table A-5—Continued 


(2) ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


63}1.801. 
491.69}. 
341.53). 
26]1.41]. 
241.38}. 
19}1 .28). 
15]1.18). 


Table A-6. The 428 digraphs of| Table A-1] arranged in alphabetic order by initial letters, then 
by absolute frequencies, accompanied by the logarithms of their assigned 
probabilities. 


FL Lio }hez4 
(F) | QF) 


AT cccceans art BS OL ccessive 510.70).42 | ET........ 37\1.571.79 |GO......... 6|0.78).45 
AR... 4411.64.82 }CK........ 410.60).38 | EA........ 3511.541.78 | GI... 510.70).42 
AS ........ 41)1.61}.80 | CR......... 410.60].38 | EC........ 32/1.51}.76 | GR......... 5/0.70].42 
AL veces 3211.51.76 |CU......... 410,601.38 | EL........ 9911.46.74 | GT......... 4|0.60|.38 
AD... 9711.43).73 | CC... 3lo.48|.33 | EI......... 2711.43.73 | GN......... 3l0.48].33 
Aicnsan 17|1.23164 [CD......... 1/0.00|.13 | EP ........ 2011.30|.67 | GS wo... 310.48}.33 
BC adocsies 14/1.151.61 |CF......... 10.00.13 | EV........ 2011.30.67 | GC........- 210,301.25 
AM ....... 1441.15).61 {CM ........ 3j0.00).13 | EF ........ 18)1.26].66 | GF ......... 210.30).25 
AU........ 13]1.11}.59 |CN......... 1/0.00).13 | EM ....... 14/1.15}.61 | GL......... 210.30}.25 
AP incase. 12}1.08).58 |CS ......... 10.00.13 }| EO........ 12|1.08].58 | GP......... 210.30].25 
AY veces 12/1.08).58 |CW........ 10.00.13 | EQ........ 12/1.081.58 | GU......... 210,301.25 
AV veccceeee 710.85|.48 |CY......... 1/0.00].13 | EH......... 710.85|.48 | GD......... 1/0.00].13 
AB scccatexs 610. 781.45 EW ........ 710.851.48 | GG... 140.00}.13 
AG) eiwvsis 610.78|.45 |DE........ 33}1.52).77 | EX......... 710.85).48 | Gd... 1/0.00].13 
AFP oo 4'0.60138 |DA........ 3211.51.76 | EB......... 410.60|.38 | GM........ 1}0.00}.13 
BON scccalves 310.48|.33 |DI......... 2711.43.73 | EG......... 410.60|.38 | GW........ 110.00].13 
AW ........ 3]0.481.33 |DO........ 16]1.20].63 | EY......... 4}0.60].38 
AH es cses 2|0.30].25 | DT........ 15]1.18}.62 | EU......... 3{0.48].383 | HI......... 3311 .52].77 
AK... 210.30|.25 |DS ........ 13/1.11|.59 | BJ... 1/0.00].13 | HT........ 2811.45.74 
AO......... 210.301.25 |DR........ 1211.08].58 | EZ ......... 10.001.13 | HA........ 20}1 .30).67 
AE veces 1/0.00|.13 |DD......... 810.90].51 HE........ 20|1.30].67 
AD oeveutiacde 1j0.00).18 | DF ......... 8]0.90).51 | FO........ 40}1.60].80 | HO........ 20]1.30].67 
DM ........ 510.70|.42 | FI.......... 39}1.59|.80 | HR........ 1711.23].64 
BE........ 19/1.26.66 |DP......... 510.70).42 | FF......... 11/1.04].56 | HU......... 8lo.90].51 
BY oo... 710.85).48 |DU......... 510.70|.42 | FT ........ 11/1.041.56 | HF......... 510.70|.42 
BL oe... 60.78].45 |DB......... 410.60|.38 | FE ........ 10/1.00).55 | HS......... 410.60.38 
BA wees. 410.60138 |DC......... 410,601.38 | FR ......... 910.95|.53 |HC......... 310.48|.33 
BO... 4}0.60138 |DN......... 410.60).38 | FA ......... 510.70|.42 | HN......... 3/0.48].33 
oe 210.30(.25 |DW........ 410.60).38 | FS.........- 3]0.48].33 | HD......... 210.30].25 
BR wees. 2l0.30|.25 |DL......... 310.48).33 | FU......... 3lo.48|.33 |HM........ 2l0.30).25 
BU... 210.301.25 |DV........- 310.48|.33 | FC.......... 2l0.30).25 | HB......... 110.00|.13 
BU cecccseees 110.00).13 |DG......... 210,301.25 | FL.......... 2l0.30).25 |HL......... 110.00).13 
BM ........ 110.00|.13 |DH......... 910.30).25 | FD ......... 110.00).13 | HP......... 110.00].13 
| BS .. 110,001.13 |DQ......... 210.301.25 | FG 140,001.13 |HQ......... 110,001.13 
BT oo... 110.00|.13 |DJ.......... 1/0.00|.13 | FM......... 1/0.00].13 | HW........ 110.00}.13 
TN aces 1]0.00].13 | FP.......... 110.00).13 | HY......... 10.01.13 
CO esis 41}1.61|.80 FW... 1/0.00].13 
CE... 32/1.51|.76 |EN...... 111]2.05].99 | FY ......... 1/0.00].13 | IN......... 75I1.88).92 
CA wee | ER........ g71.94.94] | | [TO........ 80 
CH........ EDwatcn 60|1.78|.88 | GH........2011.30].67 |IS.......... 78 
veveeeee 14]1.15(61 [ES .0...... 5411.73), sedadiet ee 


Table A-6—Continued 


ore 26)1.41).72 
Peer 24|1.38).71 
velsgabed 19]1.28).67 


OX......... 1/0.00].13 


40.72 | LR......... 2)0.30].25 | NR......... 4|0.60 38 a ae iaaee’ 60.78 AB 
.36}.70 | LU......... 270.30].25 | NP......... 3}0.48}.33 | PS.......... 6{0.78}.45 
341.69 | LV ......... 210.30}.25 | NV......... 3}0.48}.33 | PM......... 410.60}.38 
.28).67 | LW......... 210.30}.25 | NW........ 3]0.48/.33 | PH......... 3]0.48].33 
.18162 | LG......... 1/0.00).13 | NB......... 2/0.301.25 | PU......... 340.481.33 
11.59 | LH......... 1)0.00}.13 | NK......... 2)0.30).25 | PF.......... 2}0.30].25 
.OO0}.55 | IN......... 110.00}.13 | NJ ......... 1/0.00].13 | PB......... 170.00}.13 
95}. NQ......... 140.00).13 | PC ......... 10.00}.13 
901.51 | MA....... 36]1.56}.78 PD ei.0. 228 110,00}.13 
.85].48 | ME....... 26]1.41].72 | ON........ 77|1.89|.92 | PN......... 1}0.00}.13 
781.45 | MM....... 13}1.11].59 | OR........ 64/1.81].89 | PV ......... 1/0.00}.13 
.30).25 | MO....... 10/1.00].55 | OU........ 37|1.57|.79 | PW......... 1)0.00}.13 
.30).25 | MI......... 9/0.95].53 | OF ........ 2511.401.72 | PY ......... 1)0.00}.13 
380).25 | MP......... 8/0.90].51 | OM....... 25}1.40).72 
sieiaets 6/0.78).45 | OP ........25)/1.40).72 | QU........15]1.18).62 
.30).25 | MS......... 410.60}.38 | OL........ 19}1.28].67 | QM ........ 1/0.00}.13 
.30/.25 | MC ........ 3/0.48].33 | OT........ 19]1.28].67 | QR......... 1/0.00}.13 
.30).25 | MR........ 210.30}.25 | OS........ 14/1.15].61 
.00/.13 | MT ........ 210.30).25 | OD........ 12}1.08).58 | RE........ 98/1.991.96 
Sacuaeey 210.30).25 | OC......... 8/0.90].51 | RT........42/1.62].81 
-78).45 | MY ........ 2}0.30).25 | OW ........ 8/0.90].51 | RA........ 39}1.59].80 
301.25 | MD........ 1}0.00}.13 | OA......... 710.85).48 | RS ........ 31]1.49].75 
.00).13 | MF......... 1/0.00].13 | OV......... 7/0.85).48 | RI......... 30]1.48].75 
.00].13 | MH........ 1)0.00].13 | OO......... 6|0.78].45 | RO........ 28)1.45).74 
-00). 0) Beeeereter 5]0.70}.42 | RD........ 17/1.23).64 
.00). OB......... 40,601.38 | RP ........ 13H. 11159 
.00).138 | NT........ 82)1.91|.93 | OE......... 3}0.48].33 | RR........ 11/1.04].56 
se Meats 57/1.76].87 | OH......... 3}0.48].33 | RC ......... 9]0.95].53 
57,79 | ND........ 52/1.72).85 | OG......... 210.30}.25 | RM ........ 9/0.95}.53 
451.74 | NI......... 30/1.48}.75 | OK......... 210.30}.25 | RY......... 9/0.95).53 
.43]. NG........ 27/1.43].73 | OY......... 2)0.30}).25 | RG 70.85).48 


A-10 


Table A-6—-Continued 
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Table A-7. The 428 digraphs of|Table A-1| arranged in alphabetic order by final letters, then by 
absolute frequencies, accompanied by the logarithms of their assigned 
probabilities. 


Log 
(QF) 
13 


91 .00}.13 
87 .00}.13 
87 
84 43].78 
81 .28|.67 
79 901.51 
77 851.48 
76 .78].45 
72 .60/.38 
.70 .30).25 
.69 .30}.25 
.67 .30}.25 
.66 .00}.18 
61 .00}.13 
.59 .00}.13 
56 .00}.13 
55 .00}.13 
.53 
45 |! .89}.92 
33 .41).72 
.25 .30].67 
25 .15].61 
48 
38 
38 
33 
33 
33 
25 
25 
13 
13 
13 
13 


82 
80 
77 
17 
75 
75 


A-12 


Table A-7—Continued 


A-13 


Table A-7—Continued 


F lio [204 F Loo4 E Long F ae Logg 
(F) [(2F) cn (2F) (2F) (2F) 


A-14 


Table A-8. The 18 digraphs composing 25 percent of the digraphs of| Table A-1| accompanied 
by the logarithms of their assigned probabilities, arranged alphabetically by final 
letters. 


(1) ACCORDING TO THEIR FINAL (2) ACCORDING TO THEIR ABSOLUTE 
LETTERS FREQUENCIES 


i Log F a 294 F ea i 294 F Log 
(2F) (2R) (2F) (2F) 


Table A-9. The 53 digraphs composing 50 percent of the digraphs of[Table A-1|, accompanied 
by the logarithms of their assigned probabilities, arranged alphabetically by final 
letters. 


(1) ACCORDING TO THEIR FINAL LETTERS 


A-15 


Table A-9—Continued 


(2) ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


TH icse. 7811.891.92 |TO........5011.70184 [ST ........6311.801.88 

EC ........ 32/1.51).76 COs so 12: 41/1.61).80 | AT........ 47/1.67/.83 
IO’ sete 41]1.61).80 | RT........ 42/1 .62}.81 

Thies 45/1.65).82 | FO ........ 40/1.60]}.80 | ET........ 37/1 .O7E79 
ED........ 60)1.78).88 | FI.......... 39}1.59).80 | RO........ 28)1.45,.74 | HT........ 28]1.45].74 
ND........ 52j1.72).85 | SI.......... 3411 .53).77 

HI. csc 33]1.52].77 QU Laas 3711.57].79 
RE........ 98}1.99}.96 | NI......... 30}1.48}.75 
TE........ 71/1.85,.91 | RI......... 30)1.48}.75 | ER........ 87}1.94].94 |TW....... 3641 .56].78 
NE........ 57/1.76).87 OR cases 64/1.81].89 
VE........ 57/1.76].87 | AL........ 32|1.51}.76 | AR........ 44]1.64]|.82 | TY ........ 41]1.61].80 
SE ........ 49]1.69).84 | EL ........ 2911.46].74 | UR........ 31/1.49}.75 2,495 


A-16 


Table A-10. The 117 digraphs composing 75 percent of the digraphs of|Table A-1] accom- 
panied by the logarithms of their assigned probabilities, arranged alphabetically 


by final letters. 


(1) ACCORDING TO THEIR FINAL LETTERS 


Lig | Looq E Loog 
(F) | (2F) (2F) 
851.91 


87 
.69 


.66 
72 


A-17 


A-18 


Table A-10—Continued 


es 
(2) ACCORDING TO THEIR ABSOLUTE FREQUENCIES 


Lig [Lond ey Long o |Lo24 F i Lig | Loog 
(F) | QF) (2) es (F) (F) | (2F) 


igiiaties 39/1.59).8' E.........18]1.26].66 N...... 111/2.05}.99 | RS ........3111.49].75 
aa ee 36/1.56 os ee isthe 14]1.15),.61 aN Shaniane 77/1.89}.92 | NS........ 24(1.38|.71 
EA ......4. 30]1.54/.78 | IE ......... 13]1.11159 | IN......... 7511.88].92 | SS......... 19]1 .28).67 
DAwcd 32}1.51}.76 AN: dees. 64/1.81].89 | TS ........ 19]1.28].67 
Tecra pesds 2811.45].74 | OF ........ 25(1.40}.72 | UN........ 21/1.32168 | OS ........ 14]1.15).61 
Asie 28}1.45).74 | EF ........ 18]1.261.66 DS rants 13}1.11).59 
NA........ 26/1.41).72 TO giiceas: 5011.70).84 
SAS catcaes 24/1.38).71 | NG........ 27(1.43,73 | CO........ 41/1.61).80 
CA Le. 20/1.30).67 | IG......... 19]1.28167 | 10......... 4111.61.80 | NT........ 82]1.91!.93 
HA........ 20/1.30].67 BO sess: 40}1.601.80 | ST ........ 63}1.80].88 
PAL eects 14 119[o1 i Bas Weer 78/1.89}.92 | RO........ 28 145 74 | Yad ieee 47 83 | 
SH........ 26)1.411.72 | HO........ 20/1.30).67 | RT... 4211.62.81 
EC ........ 32/1.511.76 | GH........ 20)1.301.67 | WO....... 19}1.28).67 | ET........ 37}1.57].79 
Cees 2211.34].69 | CH........ 14/1.15}61 | NO........ 18]1.26).66 | HT........ 28/1 .45).74 
ING vsesee2s 19]1.28].67 POM aise, 17|1.23) 64 | IT ......... 27/1.43}.73 
AC iets: 14]1.15).61 | TIT... 45)1.65,.82 | DO........ 16]1.20|.63 | OT........ 19)1.28).67 
FL oesseiec 39]1.59}80 | SO ........ 15}1.18].62 | TT ........ 19]1.28).67 
ED........ 60]1.78).88 | SI.......... 34/1.531.77 | LO........ 13/1.11).59 | DT........ 15]1.18).62 
ND........ 52)1.72).85 | HI......... 33/1.52).77 ad Rae 15]1.18).62 
AD........ 27)1.43).73 | NI......... 30/1.481.75 7 OP ........ 25)1.40].72 | CT ........ 14]1.15).61 
RD........ 1711.231.64 | RI... 30/1.481.75 | EP ........ 20) 1.30).67 
DP. ccetet 27/1.43]}.73 OU... 371 .S71.79 
RE 93343 98/1.99].96 | EI ......... 27|1.43,.73 QU... 15}1.18).62 
TE........ 71/1.85,.91 | LI... 20/1.30).67 | ER........ 87|1.94].94 | AU Ghia: 13)1.11).59 
NE........ 57(1.76).87 | AI ......... 17|1.23).64 | OR........ 64/1.81).89 | 
VEL. 57) 1.76).87 AR........ 44/1 .64/.82 
SE sedis 49]1.69}.84 | AL........ 32/1.511.76 | UR........ 31j1.49}.75 | IV... 20]1 .40].72 
EE ........ 42)1.62).81 | EL ........ 29)1.46).74 | IR......... 27/1.43).73 | EV ........ 20{1.30].67 
LE ........ 371.57/.79 | LL......... 27/1.43).73 | PR ........ 18/1 .26).66 
DEY eas 33{1.52).77 | Ib... 23/1.36).70 | HR........ 17/1.23}.64 | TW ....... 36}1 56.78 
CE... 32/1.51).76 | OL........ 19)1.28)}.67 | TR........ 17(1.23).64 
ME ....... 26)1.41].72 Rect 15/1.18).62 
PE isa 2311.36}.70 | OM ....... 25}1.40|.72 | ES ........ 54]1.73).86 
WE ....... 22/1.341.69 | AM ....... 14/1.15,.61 | AS ....... 41)1.61).80 | TY ........41}1.61].80 
| 
| 


APPENDIX B 


FREQUENCY DISTRIBUTIONS OF 
ENGLISH TRIGRAPHS 


Frequency distributions of English trigraphs appearing in 50,000 letters of government 
plaintext telegrams. 


Table B-1. The 56 trigraphs appearing 100 or more times, arranged according to their ab- 
solute frequencies, accompanied by the logarithms of their assigned probabilities. 
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Table B-2. The 56 trigraphs appearing 100 or more times, arranged in alphabetic order by 
their first letters, then by absolute frequencies, accompanied by the logarithms of 
their assigned probabilities. 


Table B-3. The 56 trigraphs appearing 100 or more times, arranged in alphabetic order by 
their second letters, then by absolute frequencies, accompanied by the logarithms 
of their assigned probabilities. 


VEN.......... 190/2.28].83 HIR........... 106|2.03}.75 DRE.......... 100)2.00.74 


TEE.......... 174|2.24).82 
WEN ......... 153]2.18].80 ENT.......... 569]2.76).99 
REE.......... 146]2.16].80 AND.......... 228|2.36].86 EST .......... 176)2.25}.82 
MEN......... 13112.12].78 ING........... 226|2.35).86 ASH.......... 143|2.16].80 
SEV ...0..... 131)2.12}.78 ONE.......... 210/2.32).85 
NET .......... 118]2.07|.77 INE........... 192)2.28].83 
PER.......... 115}2.06].76 UND ......... 125]2.10].78 STO... 202)2.311.84 
TER.......... 115)2.06].76 NTH......... 171/2.231.82 
RED.......... 113}2.05).76 ADT achesecais 160/2.20].81 
TED.......... 112}2.05).76 ION........... 260/2.41}.88 ND Yohe pauses 157|2.20].81 
DER.......... 101)2.001.74 FOR.......... 218]2.341.85 ATE.......... 135}2.13].79 
TOP .......... 174)2.24].82 SACwsaeac: 115}2.06].76 
IGH........... 140]2.15].79 FOU.......... 152/2.181.80 
COM. ......... 136]2.13].79 OUR.......... 21112.32}.85 
THD hscecsess 211/2.32].85 
GHT.......... 196}2.29].84 EQU.......... 114]2.06].76 TIVE seesccviass 225)2.35 |.86 
THR sce. ed 15812.20).81 EVE.......... 1772.25 |.82 
HRE.......... 153]2.18}.80 
TIO sei cates 221/2.34].85 ORT.......... 146)2. 16].80 TWE......... 170|2.23|.82 
NIN .......... 207/2.32).85 ERE.......... 138]2.14].79 TWO......... 163}2.21).81 
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Table B-4. The 56 trigraphs appearing 100 or more times, arranged in alphabetic order by 
their third letters, then by absolute frequencies, accompanied by the logarithms of 
their assigned probabilities. 


APPENDIX C 


FREQUENCY DISTRIBUTIONS OF 
ENGLISH TETRAGRAPHS 


Frequency distributions of English tetragraphs appearing in 50,000 letters of govern- 
ment plaintext telegrams. 


Table C-1. The 54 tetragraphs appearing 50 or more times, arranged by absolute frequencies, 
accompanied by the logarithms of their assigned probabilities. 


SEVE 
ENTH 
MENT 


Table C-2. The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by 
their first letters, then by absolute frequencies, accompanied by the logarithms of 
their assigned probabilities. 


TION 
TEEN 


FOUR 
FIVE 


Table C-3. The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by 
their second letters, and then according to their absolute frequencies, accom- 
panied by the logarithms of their assigned probabilities. 


Table C-4. The 54 tetragraphs appearing 50 or more times, arranged in alphabetic order by 
their third letters, then by absolute frequencies, accompanied by the logarithms of 
their assigned probabilities. 


MENT 
EENT 


TION 

STOP 
FIVE 
SEVE 


Table C-5. The tetragraphs appearing 50 or more times, arranged in alphabetic order by their 
fourth letters, then by absolute frequencies, accompanied by the logarithms of their 
assigned probabilities. 


NINE 
THRE 


APPENDIX D 


WORD AND PATTERN TABLES 


Table D-1. List of words used in military text arranged 
alphabetically according to word length. 


| TWO LETTER WORDS | 


AM BE CP GO IN MM OF QM WD 
AN BN CQ HE Is MP OK So WE 
AS BY DO HQ IT MY ON TO wo 
AT co EM IF ME NO OR US 


THREE LETTER WORDS 


FOR ILL MEN 
GAL ITS MIX 
GAS JAM MOS 
GEN JET NET 
GET JOB NEW 
GHQ KEG NOT 


GOT LAW NOW 
GUN LAY OFF 
HAD LET OLD 
HAM LOT ONE 
HAS LOW OUR 
HER MAJ OUT 
HIM MAN OWE 
HIS MAT OWN 
HOW MAY PAR 


Table D-1—Continued 


FOUR LETTER WORDS 


HILL 
HITS 
HOLD 
HOOK 
INTO 
ITEM 
JOIN 
JULY 
JUNE 
JUST 
KEEP 
KILO 
KIND 
KING 
LAND 
LAST 
LATE 
LEAD 
LEAK 
LEFT 
LESS 
LIEU 


LIMA 
LINE 
LIST 
LOAD 
LONG 
LOOK 
LOSS 
LOST 
LOVE 
MADE 
MAIM 
MAIN 
MANY 
MASK 
MASS 
MEAT 
MEET 
MESS 
MIKE 
MILE 
MINE 
MOPP 


MORE 
MOVE 
MULE 
NAVY 
NEAR 
NEXT 
NINE 
NOON 
NOTE 
OMIT 
ONCE 
ONLY 
OPEN 
ORAL 
OVER 
PAPA 
PARK 
PASS 
PIPE 
PLAN 
POST 
PUMP 


FIVE LETTER WORDS 


DRESS 
DRILL 
DRIVE 
EAGER 
EARLY 
EIGHT 
ENEMY 
ENTER 
EQUAL 
EQUIP 
ERASE 
ERROR 
ETHER 
EVERY 
FATAL 
FEARS 
FERRY 
FIELD 
FIFTH 
FIFTY 
FIGHT 


FIRES 
FIRST 
FLANK 
FLARE 
FLATS 
FLEET 
FOGGY 
FORCE 
FORTY 
FRESH 
FRONT 
GATES 
GAUGE 
GIVEN 
GOING 
GROUP 
GUARD 
GUEST 
HEAVY 
HONOR 
HORSE 


HOTEL 
HOURS 
HOUSE 
INDIA 
ISSUE 
JAPAN 
JOINT 
LARGE 
LATER 
LEAST 
LEAVE 
LEVEL 
LIGHT 
LIMIT 
LOCAL 
MAJOR 
MARCH 
METER 
MILES 
MOTOR 
NAVAL 
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ACCEPT 
ACCESS 
ACROSS 
ACTION 
ACTIVE 
ADJUST 
ADVICE 
ADVISE 
AFFAIR 
ALASKA 
ALLEGE 
ALLIED 
ALLIES 
ALWAYS 
ANIMAL 
ANNUAL 
ANYWAY 
APPEAR 
ARABIA 
ARMIES 
ARMORY 
ARREST 
ARRIVE 
ASSETS 
ASSIST 
ASSURE 
ATTACH 
ATTACK 
ATTAIN 
AUGUST 
BANNER 
BARBED 
BARGES 
BATTEN 
BATTLE 
BEETLE 
BEFORE 
BETTER 


BEYOND 
BILLET 
BITTER 
BODIES 
BOMBED 
BOMBER 
BOTTOM 
BRANCH 
BREACH 
BREEZE 
BRIDGE 
BROKEN 
BUFFER 
BUREAU 
CANADA 
CANCEL 
CANNOT 
CANVAS 
CASUAL 
CAUSED 
CENTER 
CHANGE 
CHARGE 
CHEESE 
CHURCH 
CIPHER 
CIRCLE 
COFFEE 
COLORS 
COLUMN 
COMBAT 
COMMIT 
COMMON 
CONVEY 
CONVOY 
COURSE 
CREDIT 
CRISIS 


CRITIC 
DAMAGE 
DEBARK 
DECIDE 
DECODE 
DECREE 
DEFEAT 
DEFECT 
DEFEND 
DEGREE 
DEPART 
DEPEND 
DEPLOY 
DESERT 
DETACH 
DETAIL 
DEVICE 
DEVISE 
DIRECT 
DIVERT 
DIVIDE 
DOCTOR 
DOLLAR 
DOWNED 
DRAGON 
DRYRUN 
DUGOUT 
DURING 
EFFECT 
EFFORT 
EIGHTH 
EIGHTY 
EITHER 
ELEVEN 
EMBARK 
EMPLOY 
ENCODE 
ENGAGE 
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TRUCE 
TRUCK 
UNDER 
UNION 


UNITS 
USUAL 
VALOR 
VISIT 


VITAL 
VOCAL 
VOICE 


SIX LETTER WORDS 


ENGINE 
ENROLL 
ENTIRE 
ERASER 
ESCORT 
EUROPE 
EXCEPT 
EXCESS 
EXCITE 
EXPECT 
EXPELS 
EXPEND 
EXTEND 
EXTENT 
FIERCE 
FILING 
FINISH 
FIRING 
FLIGHT 
FLYING 
FOLLOW 
FORCES 
FORMAL 
FORMED 
FOUGHT 
FOURTH 
FRIDAY 
FUTURE 
GARAGE 
GREASE 
GROUND 
GUNNER 
HALTED 
HAMMER 
HAPPEN 
HARBOR 
HELPER 
HIGHER 


HOURLY 
INDEED 
INFORM 
INLAND 
INTEND 
INTENT 
INVENT 
ISLAND 
ISSUES 
JULIET 
KEEPER 
KILLED 
LADDER 
LANDED 
LAUNCH 
LEADER 
LEAGUE 
LESSON 
LETTER 
LINING 
LIQUID 
LITTER 
LITTLE 
LOCATE 
LOSSES 
MANAGE 
MANNER 
MANUAL 
MEAGER 
MEDIUM 
MEMBER 
METHOD 
METRIC 
MINING 
MINUTE 
MIRROR 
MOBILE 
MONDAY 


MORALE 
MORTAR 
MOVING 
MURDER 
MUZZLE 
NAPALM 
NAUGHT 
NEARER 
NINETY 
NORMAL 
NOTING 
NOUGHT 
NOVICE 
NOZZLE 
NUMBER 
OCCUPY 
OFFEND 
OFFICE 
OPPOSE 
ORDERS 
ORIENT 
OTHERS 
OUTPUT 
PANAMA 
PARADE 
PARLEY 
PASSED 
PASSES 
PATROL 
PERIOD 
PICKET 
PINCER 
PISTOL 
PLACES 
PLANES 
POINTS 
POISON 
POLICE 


WAGON 
WEIGH 
WHEEL 


POSTAL 
PREFER 
PROMPT 
PROPER 
PURSUE 
QUEBEC 
RADIAL 
RAIDED 
RATION 
RAVINE 
RECORD 
REDUCE 
REFILL 
REFUGE 
REFUSE 
REJECT 
RELIEF 
REMAIN 
REMEDY 
REPAIR 
REPORT 
RESCUE 
RESIST 
RESULT 
RESUME 
RETIRE 
RETURN 
REVIEW 
RIDING 
ROCKET 
ROUTED 
ROUTES 
RUBBER 
RUNNER 
SALARY 
SCHEME 
SCHOOL 
SCORED 


WHERE 
WHICH 
WIDTH 


SCREEN 
SEAMAN 
SEAMEN 
SEARCH 
SECOND 
SECTOR 
SECURE 
SELECT 
SERIAL 
SETTLE 
SEVERE 
SHELLS 
SIERRA 
SIGNAL 
SINGLE 
SLIGHT 
SPHERE 
SPOOLS 
SPOONS 
STATES 
STATUS 
STRAFE 
STREET 
STRESS 
STRIPS 
SUBMIT 
SUDDEN 
SUFFER 
SUMMER 
SUMMIT 
SUMMON 
SUNDAY 
SUNKEN 
SUNSET 
SUPPLY 
SURVEY 
SWITCH 
SYSTEM 


TABLES 
TANKER 
TARGET 
TATTOO 
TERROR 
THIRTY 
THOUGH 
THREAT 
TRAINS 
TRENCH 
TROOPS 
TURRET 
TWELVE 
TWENTY 
UNABLE 
UNITED 
UNLESS 
VALLEY 
VERBAL 
VERIFY 
VESSEL 
VICTIM 
VICTOR 
VISITS 
VISUAL 
WEIGHT 
WIRING 
WITHIN 
WOODED 
YANKEE 
ZIGZAG 


ABANDON 
ABSENCE 
ADDRESS 
ADVANCE 
AGAINST 
ALMANAC 
AMERICA 
AMMETER 
ANALYZE 
ANOTHER 
ANTENNA 
APPOINT 
APPROVE 
ARMORED 
ARRANGE 
ARRIVAL 
ASIATIC 
ASSAULT 
ATTACKS 
ATTEMPT 
AVERAGE 
AVIATOR 
AWKWARD 
BAGGAGE 
BALLOON 
BARRAGE 
BATTERY 
BATTLES 
BEARING 
BECAUSE 
BEDDING 
BETWEEN 
BICYCLE 
BINDING 
BIVOUAC 
BOMBARD 
BOMBERS 
BOMBING 
BOYCOTT 
BRIBERY 
BRIGADE 
CALIBER 
CALIBRE 
CAPTAIN 


CAPTIVE 
WAAL 2a VG 


CARRIER 


CAVALRY 
CENTRAL 
CHANGES 
CHANNEL 
CHARLIE 
CHASSIS 
CIRCUIT 
COASTAL 
COLLECT 
COLLEGE 
COLONEL 
COMMAND 
COMMEND 
COMMENT 
COMMUTE 
COMPANY 
COMPASS 
CONCEAL 
CONDEMN 
CONDUCT 
CONFINE 
CONTACT 
CONTAIN 
CONTROL 
CORRECT 
COUNCIL 
COURIER 
COVERED 
CROSSED 
CRUISER 
CURRENT 
CYCLONE 
DAMAGED 
DECIDED 
DECLARE 
DECODED 
DEFENSE 
DELAYED 
DELIVER 
DERRICK 
DESTROY 
DETRAIN 
DETRUCK 
DEVELOP 


DIAGRAM 
+e 


ADRES 


DISCUSS 
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SEVEN LETTER WORDS 


DISEASE 
DISMISS 
DISTILL 
DROPPED 
EASTERN 
ECHELON 
ELEMENT 
ELEVATE 
EMBASSY 
ENCODED 
ENEMIES 
ENFORCE 
ENGAGED 
ENTENTE 
ENTRAIN 
ENTRUCK 
ENVELOP 
EVENING 
EXCLUDE 
EXPLAIN 
EXPRESS 
EXTRACT 
EXTREME 
FALLING 
FARTHER 
FEDERAL 
FIFTEEN 
FIGHTER 
FILLING 
FINDING 
FISHING 
FITTING 
FOGHORN 
FORCING 
FORGING 
FORWARD 
FOXTROT 
FUELOIL 
FURNISH 
FURTHER 
GASSING 
GENERAL 
GETTING 
GLASSES 


GRADUAT 


INA Ua 


GRENADE 


GUARDED 
HALTING 
HASBEEN 
HEADING 
HEAVIER 
HIGHEST 
HOLDING 
HORIZON 
HOSTILE 
HUNDRED 
ICEBERG 
ILLEGAL 
ILLNESS 
INCLUDE 
INFLICT 
INITIAL 
INQUIRE 
INQUIRY 
INSPIRE 
INSTALL 
INSTANT 
INVADED 
ISLANDS 
ISSUING 
JAMMING 
JANUARY 
JUMPOFF 
KITCHEN 
KILLING 
LANDING 
LEADING 
LECTURE 
LIAISON 
LIBRARY 
LICENSE 
LIFTING 
LOADING 
LOGICAL 
LOOKOUT 
MACHINE 
MANDATE 
MANNING 
MAPPING 
MARCHED 


MARSHAI 


avatar og alas 


MARTIAL 


MAXIMUM 
MEDICAL 
MESSAGE 
MESSING 
MILITIA 
MINIMUM 
MISFIRE 
MISSILE 
MISSING 
MISSION 
MORNING 
NATURAL 
NEAREST 
NIGHTLY 
NOTHING 
NUCLEAR 
NUMBERS 
OBSERVE 
OCTOBER 
OFFENSE 
OFFICER 
OMITTED 
OPERATE 
OPINION 
ORDERED 
OUTPOST 
OUTSIDE 
PACIFIC 
PACKAGE 
PASSAGE 
PASSIVE 
PATROLS 
PAYROLL 
PLACING 
PLATOON 
POUNDER 
PRAIRIE 
PRECEDE 
PREPARE 
PRESENT 
PRESSED 
PRIMARY 
PROCEED 


PROGRAM 
PROMOTE 


rave 


PROPOSE 


PROTECT 
PROTEST 
PROVOST 
PURPOSE 
PURSUIT 
PUSHING 
QUARTER 
QUICKLY 
RADIATE 
RAIDING 
RAILWAY 
RAINING 
RAPIDLY 
REACHED 
RECEIPT 
RECEIVE 
RECOVER 
RECRUIT 
REDUCED 
REFUGEE 
REGULAR 
RELEASE 
RELIEVE 
REPAIRS 
REPLACE 
REQUEST 
REQUIRE 
RESERVE 
RESPECT 
RESPOND 
RETIRED 
RETREAT 
REVENUE 
REVERSE 
REVOLVE 
ROUTINE 
RUNNING 
SAILORS 
SATISFY 
SECRECY 
SECTION 
SECTORS 
SERVICE 


SESSION 
SETBACK 


SEVENTH 


SEVENTY 
SEVERAL 
SHELLED 
SHORTLY 
SIGNIFY 
SIMILAR 
SIMPLEX 
SINKING 
SIXTEEN 
SLOPING 
SMOKING 
SOLDIER 
STARTER 
STATION 
STOPPED 
STORAGE 
SUCCESS 
SUGGEST 
SUMMARY 
SUNRISE 
SUPPORT 
SUPPOSE 
SURPLUS 
SUSPEND 
TACTICS 
TALKING 
TARGETS 
TERRAIN 
THATTHE 
THROUGH 
TOBACCO 
TONIGHT 
TONNAGE 
TORPEDO 
TRACTOR 
TRAFFIC 
TRAWLER 
TRIGGER 
TUESDAY 
TWELFTH 
UNIFORM 
UNKNOWN 
UNUSUAL 
USELESS 
UTILITY 


UTILIZE 
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D-4 


VACANCY 
VARYING 
VESSELS 


ACTIVITY 
ACTUALLY 
ADJACENT 
ADJUTANT 
ADVANCED 
ADVANCES 
ADVISING 
ADVISORY 
AIRBORNE 
AIRCRAFT 
AIRFIELD 
AIRPLANE 
ALTITUDE 
AMERICAN 
ANALYSIS 
ANNOUNCE 
ANTITANK 
APPARENT 
APPEARED 
APPROACH 
APPROVAL 
ARMAMENT 
ARRESTED 
ASSEMBLE 
ASSEMBLY 
ASSIGNED 
ASSOONAS 
ATLANTIC 
ATTACKED 
ATTEMPTS 
AVIATION 
BARRACKS 
BARRAGES 
BATTERED 
BATTLING 
BESIEGED 
BILLETED 
BOUNDARY 
BREAKING 
BUILDING 
BULLETIN 
BUSINESS 


VICTORY 
VILLAGE 
VISIBLE 


CALAMITY 
CAMPAIGN 
CANISTER 
CAPACITY 
CAPTURED 
CARELESS 
CARRIAGE 
CARRIERS 
CARRYING 
CASUALTY 
CAUSEWAY 
CEMETERY 
CENTERED 
CHAPLAIN 
CHEMICAL 
CIRCULAR 
CITATION 
CIVILIAN 
CLERICAL 
CODEBOOK 
COMMANDS 
COMMENCE 
COMMERCE 
COMPLETE 
COMPOSED 
COMPUTER 
CONCLUDE 
CONCRETE 
CONFLICT 
CONGRESS 
CONTINUE 
CONTRACT 
CORPORAL 
CORRIDOR 
COVERING 
CRITICAL 
CRITIQUE 
CROSSING 
CRUISERS 
DAMAGING 
DARKNESS 
DAYLIGHT 
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VISITOR 
WARFARE 
WARSHIP 


EIGHT 


DECEMBER 
DECIPHER 
DECISION 
DECISIVE 
DECLARED 
DECREASE 
DEDICATE 
DEFEATED 
DEFECTOR 
DEFENDED 
DEFENDER 
DEFENSES 
DEFERRED 
DEFINITE 
DELAYING 
DEMANDED 
DEPARTED 
DEPLOYED 
DEPORTED 
DESCRIBE 
DESERTED 
DESERTER 
DESPATCH 
DETACHED 
DETECTOR 
DETONATE 
DEVELOPE 
DICTATED 
DICTATOR 
DIMINISH 
DIRECTOR 
DISARMED 
DISASTER 
DISLODGE 
DISPATCH 
DISPERSE 
DISTANCE 
DISTRESS 
DISTRICT 
DIVIDING 
DIVISION 
DOCTRINE 


WEATHER 
WESTERN 
WHETHER 


WHISKEY 
WINDAGE 
WITHOUT 


LETTER WORDS 


DOMINANT 
DRESSING 
DRIFTING 
EASTERLY 
EASTWARD 
ECONOMIC 
EFFECTED 
EIGHTEEN 
ELEMENTS 
ELEVENTH 
ELIGIBLE 
EMPLOYEE 
EMPLOYER 
ENCIPHER 
ENCIRCLE 
ENFILADE 
ENGAGING 
ENGINEER 
ENLISTED 
ENORMOUS 
ENROLLED 
ENTERING 
ENTRENCH 
ENVELOPE 
EQUALIZE 
ESCORTED 
ESTIMATE 
EUROPEAN 
EVACUATE 
EXCAVATE 
EXCHANGE 
EXERCISE 
EXPANDED 
EXPEDITE 
EXPELLED 
EXPENDED 
EXPENSES 
EXTENDED 
EXTERIOR 
FACTIONS 
FATALITY 
FEBRUARY 


FERRYING 
FIGHTERS 
FIGHTING 
FINISHED 
FLANKING 
FLEXIBLE 
FOOTHOLD 
FORENOON 
FORTRESS 
FOURTEEN 
FRONTAGE 
FUSELAGE 
GARRISON 
GROUNDED 
GROUPING 
GUARDING 
HAVEBEEN 
HINDERED 
HOSPITAL 
HOWITZER 
IDENTIFY 
IGNITION 
IMPROPER 
IMPROVED 
INCIDENT 
INDICATE 
INDIRECT 
INFANTRY 
INFECTED 
INITIATE 
INSECURE 
INSIGNIA 
INSTRUCT 
INTEREST 
INTERIOR 
INTERNAL 
INTRENCH 
INVADING 
INVASION 
INVENTED 
JETPLANE 
JUNCTION 


WITHTHE 
WITNESS 
WOUNDED 


LANGUAGE 
LAUNCHED 
LAUNCHER 
LATITUDE 
LETTERED 
LIMITING 
LOCATION 
LUMINOUS 
MAINTAIN 
MANDATED 
MANEUVER 
MARCHING 
MARITIME 
MATERIAL 
MATERIEL 
MECHANIC 
MEDICINE 
MEMORIAL 
MERCIFUL 
MESSAGES 
MIDNIGHT 
MILITARY 
MISFIRES 
MISSIONS 
MOBILIZE 
MONOPOLY 
MOUNTAIN 
MOVEMENT 
NATIONAL 
NAUTICAL 
NINETEEN 
NORTHERN 
NOVEMBER 
OBSERVED 
OBSERVER 
OBSOLETE 
OBSTACLE 
OCCUPIED 
OFFENDED 
OFFICERS 
OFFICIAL 
OPERATOR 


WRECKED 
WRITTEN 


OPPOSING 
OPPOSITE 
ORDINATE 
ORDNANCE 
OUTBOARD 
OUTGUARD 
OUTPOSTS 
PAINTING 
PARALLAX 
PARALLEL 
PASSPORT 
PLANNING 
POLITICS 
PONTOONS 
POSITION 
POSITIVE 
POSSIBLE 
POSTPONE 
PREPARED 
PRESERVE 
PRESSING 
PRESSURE 
PRINTING 
PRIORITY 
PRISONER 
PROBABLE 
PROBABLY 
PROGRESS 
PROHIBIT 
PROTESTS 
PROTOCOL 
PURPOSES 
QUARTERS 
RAILHEAD 
RAILROAD 
RALLYING 
RECEIVER 
RECORDER 
REDCROSS 
REENLIST 
REGIMENT 
REGISTER 


REJECTED 


REJECTOR 
REMEDIES 
REMEMBER 


REPAIRED 
REPEATED 


wor A 


REPEATER 
REPELLED 
REPLACED 
REPORTED 
REPULSED 
REQUIRED 


ACCESSORY 
ACCOMPANY 
ACCORDING 
ADDRESSED 
ADDRESSES 
ADMISSION 
ADVANCING 
ADVANTAGE 
AFTERNOON 
AGREEMENT 
AIRPLANES 
ALLOTMENT 
ALLOWANCE 
ALTERNATE 
AMBULANCE 
AMUSEMENT 
ANNOUNCED 
ANONYMOUS 
APPARATUS 
APPOINTED 
ARBITRARY 
ARTILLERY 
ASCENSION 
ASSAULTED 
ASSISTANT 
ASSOCIATE 
ASSURANCE 
ATTACKING 
ATTEMPTED 
ATTENTION 
AUTOMATIC 
AVAILABLE 
BALLISTIC 
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RESEARCH SCHEDULE SOLDIERS SUPPLIES TERRIFIC 

RESERVES SEABORNE SOUTHERNS URPRISE THATHAVE 
RESPECTS SEALEVEL SPECIFIC SURROUND THIRTEEN 
RESTORED SELECTED SPOTTING SURVIVED THOUSAND 
RETIRING SENTENCE SQUADRON SUSPENSE THURSDAY 
RETURNED SENTINEL STANDARD SWEEPING TOMORROW 
REVIEWED SEPARATE STATIONS SWIMMING TOTALING 
REVOLVER SERGEANT STRATEGY ‘TACTICAL TRAILERS 
RIGOROUS SHELLING SUFFERED ‘TAXATION TRAINING 
SABOTAGE SHIPPING SUITABLE TELEGRAM TRANSFER 
SANITARY SIGHTING SUPERIOR TERRIBLE TRAVERSE 
SATURDAY SKIRMISH 

NINE LETTER WORDS 

BAROMETER CONDENSED DIMENSION EXERCISES 

BATTALION CONDITION ~—iDIRECTION ~—sEXHIBITED 

BATTERIES | CONFERRED _ DIRIGIBLE EXPANSION 

BEACHHEAD CONFIDENT DISAPPEAR —_—‘ EXPANSIVE 

BEGINNING CONFLICTS DISCUSSED ~— EXPENSIVE 

BLOCKADED CONQUERED DISINFECT EXPLOSION 

BOMBARDED CONTINUAL DISMISSAL EXPLOSIVE 

BRIGADIER CONTINUED DISPERSED EXTENDING 

BUILDINGS CONTINUES DISTRICTS EXTENSION 

CABLEGRAM COOPERATE DIVISIONS EXTENSIVE 

CAMPAIGNS CORRECTED DOMINANCE FIFTEENTH 

CANCELLED _CRITICISE DOMINATED _ FIREALARM 

CARTRIDGE CRITICISM ECHELONED FORMATION 

CENTERING DEBARKING EFFECTIVE FORTIFIED 

CHALLENGE DECREASED EFFICIENT FRONTLINE 

CHARACTER DEFECTIVE ELABORATE GROUPMENT 
CHAUFFEUR DEFENSIVE ELEVATION = GYROMETER 
CHRONICAL DEFICIENT ELSEWHERE HOSTILITY 

CIGARETTE DEPARTURE EMBASSIES = HURRICANE 

CIRCULATE DEPENDENT EMERGENCY IDENTICAL 

CIVILIANS DESCRIBED EMPLOYING IMMEDIATE 

CLEARANCE DESIGNATE ENDURANCE IMPORTANT 

COALITION DESTITUTE | ENGINEERS — IMPRESSED 

COLLAPSED DESTROYED _ ENLISTING INCENTIVE 

COLLISION DESTROYER ENTRAINED INCIDENCE 

COMBATANT DETENTION EQUIPMENT INCIDENTS 

COMMANDED DETERMINE ESTABLISH —_ INCLINING 

COMMANDER DETONATED ESTIMATED INCLUDING 

COMMITTEE DETRAINED ESTIMATES __ INCLUSIVE 

COMPANIES DEVELOPED EXCESSIVE — INCREASED 

COMPELLED DIETITIAN EXCLUSION —_ INDEMNITY 

COMPLETED DIFFERENT EXCLUSIVE __ INDICATED 

CONDEMNED _ DIFFICULT EXECUTIVE INFLATION 


TRAWLERS 
VEHICLES 
VICINITY 
VIGOROUS 
WARSHIPS 
WESTERLY 
WESTWARD 
WINDWARD 
WIRELESS 
WITHDRAW 
WITHDREW 


INFLUENCE 
INHABITED 
INSTANTLY 
INTEGRITY 
INTENSIVE 
INTENTION 
INTERCEPT 
INTERDICT 
INTERFERE 
INTERMENT 
INTERPOSE 
INTERRUPT 
INTERVENE 
INTERVIEW 
INVENTION 
IRREGULAR 
KILOMETER 
LAUNCHING 
LIABILITY 
LOGISTICS 
LONGITUDE 
MAINTAINS 
MECHANISM 
MEMORANDA 
MESSENGER 
MOTORIZED 
MOVEMENTS 
MUNITIONS 
NAVALBASE 
NECESSARY 
NECESSITY 
NEGLIGENT 
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NEWSPAPER 
NORTHEAST 
NORTHERLY 
NORTHWARD 
NORTHWEST 
NUMBERING 
OBJECTION 
OBJECTIVE 
OBTAINING 
OCCUPYING 
OFFENSIVE 
OFFICIALS 
OPERATING 
OPERATION 
OSCILLATE 
OUTSKIRTS 
PARACHUTE 
PARAGRAPH 
PARTITION 


PASSENGER 
PATRIOTIC 
PENETRATE 
PERMANENT 
PERSONNEL 
PLACEMENT 
POLITICAL 
POPULATED 
POSITIONS 
PRACTICAL 
PRECEDING 
PREFERRED 
PREMATURE 
PREPARING 
PRESIDENT 
PRINCIPAL 
PRINCIPLE 
PRISONERS 
PROCEDURE 


Table D-1—Continued 


PROCEEDED 
PROJECTOR 
PROMOTION 
PROPOSALS 
PROTECTED 
PROTECTOR 
PROTESTED 
PROVISION 
PROXIMITY 
RADIATION 
RADIOGRAM 
READINESS 
REARGUARD 
REBELLION 
RECEIVING 
RECOGNIZE 
RECOMMEND 
REENFORCE 
REFERENCE 


REFILLING 
REGARDING 
REINFORCE 
REINSTATE 
REMAINDER 
REMAINING 
REPRESENT 
REPRISALS 
REQUESTED 
REQUIRING 
RESOURCES 
RESTRAINT 
RETENTION 
RETURNING 
REVIEWING 
SCREENING 
SEAPLANES 
SECRETARY 
SEMICOLON 


TEN LETTER WORDS 


SEMIRIGID 
SEPTEMBER 
SERIOUSLY 
SERVICING 
SEVENTEEN 
SHELLFIRE 
SITUATION 
SIXTEENTH 
SOUTHEAST 
SOUTHWARD 
SOUTHWEST 
SPEARHEAD 
STANDARDS 
STATEMENT 
STRAGGLER 
STRATEGIC 
SUBMITTED 
SUCCEEDED 


SURRENDER 
SUSPECTED 
SUSPENDED 
SUSPICION 
TECHNICAL 
TECHNIQUE 
TELEPHONE 
TENTATIVE 
TERRITORY 
THEREFORE 
TRANSPORT 
TWENTIETH 
UNTENABLE 
VARIATION 
WATERTANK 
WEDNESDAY 
WITNESSES 
YESTERDAY 


ACCEPTABLE 
ACCEPTANCE 
ACCIDENTAL 
ACCORDANCE 
ACTIVITIES 
ADDITIONAL 
AIRCONTROL 
AIRSUPPORT 
ALLEGIANCE 
ALLOCATION 
AMBASSADOR 
AMMUNITION 
ANTICIPATE 
APPARENTLY 
APPEARANCE 
APPROACHED 
ARMOREDCAR 
ARTIFICIAL 
ASPOSSIBLE 
ASSEMBLIES 
ASSESSMENT 
ASSIGNMENT 
ASSISTANCE 
ATOMICBOMB 
ATTACHMENT 
ATTAINMENT 


ATTEMPTING 
AUDIBILITY 
AUTOMOBILE 
BALLISTICS 
BATTLESHIP 
BEENNEEDED 
BRIDGEHEAD 
CAMOUFLAGE 
CAPABILITY 
CASUALTIES 
CENSORSHIP 
CENTRALIZE 
CIRCUITOUS 
COASTGUARD 
COLLECTING 
COLLECTION 
COLLISIONS 
COMMANDANT 
COMMANDEER 
COMMANDING 
COMMISSARY 
COMMISSION 
COMMITMENT 
COMMUNIQUE 
COMPENSATE 
COMPLETELY 


COMPRESSED 
CONCERNING 
CONCESSION 
CONCLUSION 
CONDITIONS 
CONFERENCE 
CONFESSION 
CONFIDENCE 
CONNECTING 
CONNECTION 
CONSPIRACY 
CONSTITUTE 
CONTINGENT 
CONTINUOUS 
CONTRABAND 
CONVENIENT 
COORDINATE 
CORRECTION 
CREDENTIAL 
CROSSROADS 
DEBOUCHING 
DECIPHERED 
DECORATION 
DEDICATION 
DEFICIENCY 
DEFINITION 


DEMOBILIZE 
DEPARTMENT 
DEPENDABLE 
DEPLOYMENT 
DEPRESSION 
DESIGNATED 
DESPATCHED 
DESPATCHES 
DESTROYERS 
DETACHMENT 
DETERMINED 
DETONATION 
DETRAINING 
DETRUCKING 
DIFFERENCE 
DIPLOMATIC 
DIRECTIONS 
DISCIPLINE 
DISCUSSION 
DISPATCHED 
DISPATCHER 
DISPATCHES 
DISPERSION 
DISTRESSED 
DISTRIBUTE 
DOMINATION 


EFFICIENCY 
EIGHTEENTH 
ELEMENTARY 
EMPLOYMENT 
ENCIPHERED 
ENCIRCLING 
ENEMYTANKS 
ENGAGEMENT 
ENLISTMENT 
ENROLLMENT 
ENTERPRISE 
ENTRENCHED 
ENTRUCKING 
EQUIVALENT 
ESTIMATION 
EVACUATING 
EVACUATION 
EVALUATION 
EXCAVATION 
EXCITEMENT 
EXHIBITION 
EXPEDITING 
EXPEDITION 
EXPENDABLE 
EXPERIENCE 
EXPERIMENT 


EXPLOSIONS 
EXTINGUISH 
FACILITIES 
FLASHLIGHT 
FORMATIONS 
FOUNDATION 
FOURTEENTH 
FRONTLINES 
GEOGRAPHIC 
GONIOMETER 
GOVERNMENT 
GYROSCOPIC 
HELICOPTER 
HYDROMETER 
HYGROMETER 
ILLITERATE 
ILLUMINATE 
ILLUSTRATE 
IMPASSABLE 
IMPOSSIBLE 
IMPRESSION 
IMPRESSIVE 
INCENDIARY 


ACCESSORIES 
ACKNOWLEDGE 
AERONAUTICS 
ALTERNATING 
APPLICATION 
APPOINTMENT 
APPROACHING 
APPROPRIATE 
APPROXIMATE 
ARBITRATION 
ARMOREDCARS 
ARRANGEMENT 
ASSESSMENTS 
ASSIGNMENTS 
ASSOCIATION 
BATTLEFIELD 
BATTLESHIPS 
BELLIGERENT 
BOMBARDMENT 
CATASTROPHE 
CERTIFICATE 
CIRCULATION 


INDICATING 
INDICATION 
INDIVIDUAL 
INFLICTING 
INSECURITY 
INSPECTION 
INSTRUCTED 
INSTRUCTOR 
INSTRUMENT 
INTERNMENT 
INVITATION 
IRRIGATION 
KILOMETERS 
LABORATORY 
LIEUTENANT 
LIMITATION 
LOCOMOTIVE 
MACHINEGUN 
MAINTAINED 


MANAGEMENT 


MECHANIZED 


MEMORANDUM 


MILLIMETER 


Table D-1—Continued 


MOTORCYCLE 
NATURALIZE 
NAVIGATION 
NEGLIGENCE 
NEWSPAPERS 
NINETEENTH 
OBJECTIVES 
OCCUPATION 
ONEHUNDRED 
OPERATIONS 
OPPOSITION 
OVERCOMING 
PATROLLING 
PERMISSION 
PERSISTENT 
PHOSPHORUS 
POPULATION 
POSSESSION 
POSTOFFICE 
PRECEDENCE 
PREFERENCE 
PRESCRIBED 
PROHIBITED 


PROPORTION 
PROTECTION 
PROVISIONS 
QUARANTINE 
RECEPTACLE 
RECREATION 
RECRUITING 
REENFORCED 
REENLISTED 
REGIMENTAL 
REGULATION 
REINFORCED 
RESISTANCE 
RESPECTFUL 
RESTRICTED 
REVOLUTION 
SANITATION 
SEPARATION 
SIGNALLING 
SIMILARITY 
STATISTICS 
SUBMARINES 
SUBMISSION 


ELEVEN LETTER WORDS 


COEFFICIENT 
COINCIDENCE 
COMMUNICATE 
COMMUNIQUES 


COMPARTMENT 


COMPETITION 
COMPOSITION 
COMPUTATION 


CONCEALMENT 


CONCENTRATE 
CONFINEMENT 
CONSTITUTED 
CONSUMPTION 
CONTINENTAL 
CONTROVERSY 
COOPERATION 
CORPORATION 
CORRECTNESS 
CREDENTIALS 
CUSTOMHOUSE 
DEBARKATION 
DEMONSTRATE 


DESCRIPTION 
DESCRIPTIVE 
DESIGNATION 
DESTRUCTION 
DETERIORATE 
DEVELOPMENT 
DISAPPEARED 
DISCONTINUE 
DISCREPANCY 
DISINFECTED 
DISPOSITION 
DISTINCTION 
DISTINGUISH 
DYNAMOMETER 
ECHELONMENT 
EFFECTIVELY 
ELECTRICITY 
EMBARKATION 
EMPLACEMENT 
ENCOUNTERED 
ENEMYPLANES 
ENFORCEMENT 


ENGAGEMENTS 
ENGINEERING 
ESTABLISHED 
ESTIMATEDAT 
EXAMINATION 
EXPLANATION 
EXTENSIVELY 
EXTERMINATE 
FINGERPRINT 
FIRECONTROL 
HEAVYBOMBER 
HEAVYLOSSES 
HOSTILITIES 
IMMEDIATELY 
IMMIGRATION 
IMPEDIMENTA 
IMPROVEMENT 
INCOMPETENT 
INDEPENDENT 
INFLAMMABLE 
INFORMATION 
INSPIRATION 


SUBSTITUTE 
SUCCESSFUL 
SUCCESSIVE 
SUFFICIENT 
SUPPORTING 
SUSPENSION 
SUSPICIONS 
SUSPICIOUS 
THIRTEENTH 
THREATENED 
TRAJECTORY 
TRANSPORTS 
TRANSVERSE 
TROOPSHIPS 
TWENTYFIVE 
UNDERSTAND 
UNDERSTOOD 
UNEXPENDED 
UNSUITABLE 
VICTORIOUS 
VISIBILITY 
WILLATTACK 
WITHDRAWAL 


INSTITUTION 
INSTRUCTION 
INSTRUMENTS 
INTELLIGENT 
INTERCEPTED 
INTERESTING 
INTERFERING 
INTERPRETER 
INTERRUPTED 
INTERVENING 
INVESTIGATE 
LEGISLATION 
LIGHTBOMBER 
MAINTENANCE 
MANUFACTURE 
MEASUREMENT 
NATIONALISM 
NATIONALITY 
NAVALATTACK 
NAVALBATTLE 
NAVALFORCES 
NECESSITATE 
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OBSERVATION PRELIMINARY REPLACEMENT SCHOOLHOUSE SURRENDERED 
OVERWHELMED PREPARATION REQUIREMENT SEVENTEENTH SYNCHRONIZE 
PARENTHESES PROGRESSIVE REQUISITION SEVENTYFIVE TEMPERATURE 
PARENTHESIS RADIOACTIVE RESERVATION SIGNIFICANT THERMOMETER 
PENETRATION RANGEFINDER RESIGNATION SMOKESCREEN TOPOGRAPHIC 
PERFORMANCE REAPPOINTED RESPONSIBLE STRATEGICAL TRADITIONAL 
PHILIPPINES RECOGNITION RESTRICTION SUBSISTENCE TRANSFERRED 
PHOTOGRAPHY RECOMMENDED ~— RETALIATION SUITABILITY WITHDRAWING 


PREARRANGED RECONNOITER RETROACTIVE SUPERIORITY 


ADVANTAGEOUS 
AGRICULTURAL 
ANNOUNCEMENT 
ANTIAIRCRAFT 
ANTICIPATION 
BREAKTHROUGH 
CANCELLATION 
CARELESSNESS 
COMMENCEMENT 
COMMENDATION 
COMMISSIONED 
COMMISSIONER 
COMPENSATION 
COMPLETENESS 
CONCENTRATED 
CONCILIATION 
CONFIDENTIAL 
CONFIRMATION 
CONFISCATION 
CONFORMATION 
CONSCRIPTION 
CONSIDERABLE 
CONSTITUTING 
CONSTITUTION 
CONSTRUCTION 
CONTINUATION 
CONVALESCENT 


ACCOMMODATION 
APPROXIMATELY 
CHRONOLOGICAL 
CIRCUMSTANCES 
COMMUNICATION 
CONCENTRATING 
CONCENTRATION 


CONVERSATION 
COORDINATION 
DECENTRALIZE 
DECIPHERMENT 
DEMONSTRATED 
DEPARTMENTAL 
DIFFICULTIES 
DISORGANIZED 
DISPLACEMENT 
DISSEMINATED 
DISTRIBUTING 
DISTRIBUTION 
EMPLACEMENTS 
ENCIPHERMENT 
ENTANGLEMENT 
ENTERPRISING 
FIGHTERPLANE 
GENERALALARM 
GENERALSTAFF 
GEOGRAPHICAL 
HEADQUARTERS 
HEAVYBOMBERS 
HYDROGRAPHIC 
ILLUMINATING 
ILLUMINATION 
ILLUSTRATION 


CONGRESSIONAL 
CONSIDERATION 
CORRESPONDING 

COUNTERATTACK 
DECENTRALIZED 

DEMONSTRATION 
DEPENDABILITY 


TWELVE LETTER WORDS 


THIRTEEN LETTER WORDS 


INAUGURATION 
INCOMPETENCE 
INEFFICIENCY 
INSTRUCTIONS 
INTELLIGENCE 
INTERCEPTION 
INTERDICTION 
INTERFERENCE 
INTERMEDIATE 
INTERRUPTION 
INTERVENTION 
INTRODUCTION 
INTRODUCTORY 
IRREGULARITY 
LIGHTBOMBERS 
MARKSMANSHIP 
MEASUREMENTS 
MEDIUMBOMBER 
MOBILIZATION 
NONCOMBATANT 
NORTHWESTERN 
OBSTRUCTIONS 
ORGANIZATION 
PREPARATIONS 
PREPAREDNESS 
PRESERVATION 


DETERMINATION 
DISAPPEARANCE 
DISCREPANCIES 
DISSEMINATION 
DISTINGUISHED 
ENTERTAINMENT 
ESTABLISHMENT 


PRESIDENTIAL 
PROCLAMATION 
PSYCHROMETER 
RADIOSTATION 
RECREATIONAL 
REENLISTMENT 
REGISTRATION 
REPLACEMENTS 
RESPECTFULLY 
ROADJUNCTION 
SATISFACTORY 
SEARCHLIGHTS 
SHARPSHOOTER 
SIGNIFICANCE 
SIMULTANEOUS 
SOUTHWESTERN 
SUBSTITUTION 
SUCCESSFULLY 
TRANSFERRING 
TRANSMISSION 
TRANSPACIFIC 
UNIDENTIFIED 
UNITEDSTATES 
UNSUCCESSFUL 
VERIFICATION 
VETERINARIAN 


EXTERMINATION 
EXTRAORDINARY 
FIGHTERPLANES 
IMPRACTICABLE 
INDETERMINATE 
INSTALLATIONS 
INSTANTANEOUS 


INTERNATIONAL 
INVESTIGATION 
MEDIUMBOMBERS 
MISCELLANEOUS 


ADMINISTRATION 
ADMINISTRATIVE 
CENTRALIZATION 
CHARACTERISTIC 
CIRCUMSTANTIAL 
CLASSIFICATION 
CORRESPONDENCE 
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PRELIMINARIES 
QUALIFICATION 
QUARTERMASTER 
REAPPOINTMENT 


REENFORCEMENT 
REIMBURSEMENT 
REINFORCEMENT 
REINSTATEMENT 


FOURTEEN LETTER WORDS 


DEMOBILIZATION 
DISCONTINUANCE 
DISTINGUISHING 
IDENTIFICATION 
INTERPRETATION 
INVESTIGATIONS 


IRREGULARITIES 
METEOROLOGICAL 
NATURALIZATION 
RECOMMENDATION 
RECONNAISSANCE 
RECONNOITERING 


REVOLUTIONARY 
SPECIFICATION 
TRANSATLANTIC 


RECONSTRUCTION 
REORGANIZATION 
REPRESENTATIVE 
RESPONSIBILITY 
SATISFACTORILY 
TRANSPORTATION 
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Table D-2. List of words used in military text arranged alphabetically 
in reverse order according to word length. 


TWO LETTER WORDS 


THREE LETTER WORDS 


JOB END BIG HIM RUN AIR LET PUT MIX 
ROB SEE MAJ ARM SUN FOR NET PVT SIX 
TUB AGE ADJ SUM OWN OUR SET CWT BOX 
QMC SHE ASK CAN AGO GAS WET YOU DAY 
ARC THE GAL MAN TOO HAS YET CAV LAY 
BAD DIE ALL TAN TWO WAS SGT LAW MAY 
HAD ONE ILL TEN TOP HIS WGT SAW PAY 
ADD ARE COL MEN GHQ MOS FIT FEW SAY 
RED USE CPL PEN BAR ITS GOT NEW WAY 
AID DUE CAM TEN CAR EAT LOT HOW ANY 
BID OWE HAM PIN FAR MAT NOT LOW SPY 
DID EYE JAM TIN PAR VAT APT NOW DRY 
RID OFF SAM TON WAR ACT BUT TOW TRY 
OLD * BAG ECM WON HER GET CUT TAX BUY 


FOUR LETTER WORDS 


SEA AND KEG AIM GUN PER JET ouT FIX 


AREA SIDE HERE EACH DARK FIRM SHIP MEAT JUST 
ALFA CODE WERE HIGH PARK FORM DUMP THAT ROUT 
ASIA FLEE FIRE DASH MASK THAN PUMP WHAT NEXT 
LIMA EDGE WIRE PUSH TASK PLAN STOP FEET TEXT 
PAPA TAKE MORE RUSH ORAL BEEN MOPP MEET LIEU 
BULB MIKE BASE WITH FEEL SEEN NEAR LEFT ZULU 
BOMB YOKE FUSE BOTH RAIL THEN REAR OMIT DRAW 
HEAD FILE DATE LEAK CALL WHEN OVER UNIT XRAY 
LEAD MILE LATE WEAK FALL OPEN FOUR HALT AWAY 
LOAD MULE SITE BACK CELL MAIN YOUR TENT BODY 
ROAD RULE NOTE WEEK FELL RAIN EYES SHOT THEY 
RAID SAME BLUE TALK WELL JOIN THIS RIOT ALLY 
SAID TIME HAVE BULK HILL NOON TONS FLOT ONLY 
HOLD SOME FIVE RANK WILL SOON GUNS DIRT JULY 
HAND LINE LOVE SANK FULL DOWN MASS EAST ARMY 
LAND MINE MOVE TANK TOOL TOWN PASS FAST MANY 
KIND NINE FUZE SUNK TEAM KILO LESS LAST VARY 
HARD ZONE HALF BOOK THEM ZERO MESS WEST VERY 
HERD JUNE GOLF COOK ITEM ALSO LOSS LIST EASY 
ONCE PIPE FLAG HOOK MAIM INTO HITS LOST CITY 
MADE TYPE KING LOOK FROM KEEP DAYS POST NAVY 
AIDE TARE LONG TOOK FARM 


ALPHA 
INDIA 
COMMA 
DELTA 
SQUAD 
SPEED 
WIPED 
RIGID 
RAPID 
FIELD 
BLIND 
GUARD 
AWARD 
THIRD 
BRIBE 
PLACE 
VOICE 
FORCE 
TRUCE 
THREE 
RIDGE 
SIEGE 
RANGE 
BARGE 
LARGE 


CANADA 
ARABIA 
ALASKA 
PANAMA 
SIERRA 
QUEBEC 
METRIC 
CRITIC 
BOMBED 
BARBED 
RAIDED 
LANDED 
WOODED 
INDEED 
ALLIED 
KILLED 
FORMED 
DOWNED 


GAUGE 
STAKE 
SMOKE 
BROKE 
SCALE 
TITLE 
ALINE 
SLOPE 
FLARE 
THERE 
WHERE 
SHORE 
CEASE 
ERASE 
THESE 
CLOSE 
HORSE 
CAUSE 
HOUSE 
ROUTE 
ISSUE 
LEAVE 
DRIVE 
PROVE 
CURVE 


SCORED 
PASSED 
CAUSED 
UNITED 
HALTED 
ROUTED 
LIQUID 
INLAND 
ISLAND 
DEFEND 
OFFEND 
DEPEND 
EXPEND 
INTEND 
EXTEND 
SECOND 
BEYOND 
GROUND 


SEIZE 
CHIEF 
STAFF 
PROOF 
BEING 
GOING 
ALONG 
AMONG 
BEACH 
REACH 
WHICH 
MARCH 
WEIGH 
FRESH 
WIDTH 
FIFTH 
TENTH 
NINTH 
BOOTH 
DEPTH 
NORTH 
SOUTH 
SIXTH 
BREAK 
BLACK 


METHOD 
PERIOD 
RECORD 
OFFICE 
POLICE 
ADVICE 
DEVICE 
NOVICE 
FIERCE 
REDUCE 
PARADE 
DECIDE 
DIVIDE 
DECODE 
ENCODE 
COFFEE 
YANKEE 
DECREE 
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FIVE LETTER WORDS 


CHECK ALARM 
QUICK JAPAN 
TRUCK TAKEN 
CREEK SEVEN 
FLANK — GIVEN 
CLERK ALIGN 
LOCAL AGAIN 
VOCAL PLAIN 
CANAL TRAIN 
FATAL BEGIN 
VITAL WAGON 
TOTAL UNION 
EQUAL COLON 
USUAL DRAWN 
NAVAL ROMEO 
WHEEL TANGO 
STEEL — RADIO 
REPEL BRAVO 
HOTEL EQUIP 
LEVEL TROOP 
APRIL GROUP 
SMALL OSCAR 
SHELL CLEAR 
SPELL SUGAR 
DRILL UNDER 
SIX LETTER 
DEGREE SETTLE 
STRAFE LITTLE 
ENGAGE NOZZLE 
DAMAGE MUZZLE 
MANAGE SCHEME 
GARAGE RESUME 
BRIDGE ENGINE 
ALLEGE RAVINE 
CHANGE EUROPE 
CHARGE SPHERE 
REFUGE SEVERE 
MORALE RETIRE 
UNABLE ENTIRE 
CIRCLE BEFORE 
SINGLE SECURE 
MOBILE ASSURE 
BEETLE FUTURE 
BATTLE GREASE 


ORDER 
DEFER 
REFER 
EAGER 
ROGER 
ETHER 
OTHER 
LATER 
METER 
AFTER 
ENTER 
RIVER 
COVER 
THEIR 
PRIOR 
MAJOR 
VALOR 
ARMOR 
HONOR 
ERROR 
MOTOR 
AREAS 
BOMBS 
RAIDS 


WORDS 


CHEESE 
ADVISE 
DEVISE 
OPPOSE 
COURSE 
REFUSE 
LOCATE 
EXCITE 
MINUTE 
RESCUE 
LEAGUE 
PURSUE 
ARRIVE 
ACTIVE 
TWELVE 
BREEZE 
RELIEF 
ZIGZAG 


WOODS 
YARDS 
MILES 
FIRES 
CASES 
GATES 
PACKS 
DECKS 
DOCKS 
BANKS 
TANKS 
PLANS 
SHIPS 
CORPS 
FEARS 
PAIRS 
HOURS 
DRESS 
PRESS 
CROSS 
FLATS 
BOATS 
RAFTS 
UNITS 


RIDING 
FILING 
LINING 
MINING 
FIRING 
WIRING 
DURING 
NOTING 
MOVING 
FLYING 
BREACH 
DETACH 
ATTACH 
BRANCH 
TRENCH 
LAUNCH 
SEARCH 
CHURCH 


TRACT 
FLEET 
QUIET 
ASSET 
SHIFT 
EIGHT 
FIGHT 
LIGHT 
NIGHT 
RIGHT 
SIGHT 
AWAIT 
SPLIT 
LIMIT 
VISIT 
AGENT 
JOINT 
POINT 
FRONT 
COUNT 
DEPOT 
START 
ALERT 
LEAST 


SWITCH 
THOUGH 
FINISH 
EIGHTH 
FOURTH 
ATTACK 
DEBARK 
EMBARK 
VERBAL 
RADIAL 
SERIAL 
ANIMAL 
FORMAL 
NORMAL 
SIGNAL 
POSTAL 
MANUAL 
ANNUAL 


COAST 
CREST 
GUEST 
FIRST 
BURST 
ABOUT 
ALLOW 
ANNEX 
TODAY 
DELAY 
READY 
FOGGY 
DAILY 
RALLY 
APPLY 
EARLY 
ENEMY 
EVERY 
FERRY 
FIFTY 
PARTY 
FORTY 
SIXTY 
HEAVY 


CASUAL 
VISUAL 
CANCEL 
VESSEL 
DETAIL 
REFILL 
ENROLL 
SCHOOL 
PATROL 


- PISTOL 


SYSTEM 
VICTIM 
NAPALM 
BOTTOM 
INFORM 
MEDIUM 
SEAMAN 
SUDDEN 
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Table D-2—Continued 


SCREEN TATTOO HAMMER TERROR CRISIS STATUS WEIGHT DEPART ANYWAY 
SUNKEN APPEAR) SUMMER MIRROR EXPELS ALWAYS FLIGHT DESERT REMEDY 
BROKEN DOLLAR BANNER SECTOR SHELLS COMBAT SLIGHT DIVERT VALLEY 
SEAMEN MORTAR MANNER VICTOR SPOOLS DEFEAT NAUGHT ESCORT PARLEY 
HAPPEN RUBBER GUNNER DOCTOR TRAINS THREAT FOUGHT EFFORT CONVEY 
BATTEN MEMBER RUNNER CANVAS SPOONS DEFECT NOUGHT REPORT SURVEY 
ELEVEN BOMBER KEEPER PLACES ~~ STRIPS EFFECT CREDIT ARREST VERIFY 
REMAIN NUMBER HELPER FORCES TROOPS REJECT SUBMIT RESIST SUPPLY 
ATTAIN PINCER PROPER BARGES ORDERS SELECT COMMIT ASSIST HOURLY 
WITHIN LEADER NEARER BODIES OTHERS EXPECT SUMMIT AUGUST DEPLOY 
COLUMN LADDER ERASER - ALLIES COLORS DIRECT RESULT ADJUST EMPLOY 
DRAGON MURDER CENTER ARMIES ACCESS STREET ORIENT DUGOUT CONVOY 
RATION PREFER BETTER TABLES EXCESS TARGET INTENT OUTPUT OCCUPY 
ACTION BUFFER LETTER PLANES UNLESS JULIET EXTENT BUREAU SALARY 
COMMON SUFFER BITTER PASSES STRESS PICKET INVENT REVIEW ARMORY 
SUMMON MEAGER LITTER LOSSES ACROSS ROCKET CANNOT FOLLOW NINETY 
POISON HIGHER AFFAIR STATES ASSETS BILLET ACCEPT FRIDAY EIGHTY 
LESSON CIPHER ~~ REPAIR ROUTES _ VISITS TURRET EXCEPT MONDAY TWENTY 
RETURN EITHER HARBOR ISSUES POINTS SUNSET PROMPT SUNDAY THIRTY 
DRYRUN TANKER 


SEVEN LETTER WORDS 


AMERICA HUNDRED OUTSIDE EXTREME BECAUSE LEADING SLOPING 
MILITIA ORDERED INCLUDE CONFINE MANDATE LOADING MAPPING 
ANTENNA COVERED EXCLUDE MACHINE RADIATE BEDDING BEARING 
ALMANAC RETIRED REFUGEE ROUTINE OPERATE RAIDING GASSING 
BIVOUAC ARMORED WINDAGE CYCLONE ELEVATE HOLDING MESSING 
TRAFFIC PRESSED BAGGAGE WARFARE ENTENTE LANDING MISSING 
PACIFIC CROSSED PACKAGE DECLARE PROMOTE BINDING LIFTING 
ASIATIC OMITTED VILLAGE PREPARE COMMUTE FINDING HALTING 
REDUCED DELAYED TONNAGE CALIBRE REVENUE FORGING GETTING 
INVADED COMMAND . AVERAGE MISFIRE RELIEVE FISHING FITTING 
DECIDED COMMEND STORAGE INSPIRE RECEIVE PUSHING ISSUING 
DECODED SUSPEND BARRAGE REQUIRE PASSIVE NOTHING VARYING 
ENCODED RESPOND PASSAGE INQUIRE CAPTIVE TALKING ICEBERG 
WOUNDED BOMBARD MESSAGE LECTURE REVOLVE SINKING THROUGH 
GUARDED AWKWARD COLLEGE RELEASE APPROVE SMOKING FURNISH 
PROCEED FORWARD ARRANGE DISEASE OBSERVE FALLING TWELFTH 
ENGAGED REPLACE WITHTHE SUNRISE RESERVE FILLING SEVENTH 
DAMAGED SERVICE THATTHE LICENSE UTILIZE KILLING SETBACK 
REACHED ADVANCE CHARLIE DEFENSE ANALYZE JAMMING DERRICK 
MARCHED ABSENCE PRAIRIE OFFENSE JUMPOFF EVENING DETRUCK 
WRECKED ENFORCE VISIBLE PROPOSE BOMBING RAINING ENTRUCK 
SHELLED BRIGADE BICYCLE SUPPOSE PLACING MANNING MEDICAL 
DROPPED GRENADE MISSILE PURPOSE FORCING RUNNING LOGICAL 
STOPPED PRECEDE HOSTILE REVERSE HEADING MORNING CONCEAL 
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ILLEGAL 
MARSHAL 
INITIAL 
MARTIAL 
FEDERAL 
GENERAL 
SEVERAL 
CENTRAL 
NATURAL 
COASTAL 
GRADUAL 
UNUSUAL 
ARRIVAL 
CHANNEL 
COLONEL 
COUNCIL 
FUELOIL 
INSTALL 
DISTILL 
PAYROLL 
CONTROL 
DIAGRAM 
PROGRAM 
UNIFORM 
MINIMUM 


INSIGNIA 
SPECIFIC 
TERRIFIC 
ECONOMIC 
MECHANIC 
ATLANTIC 
RAILHEAD 
RAILROAD 
REPLACED 
ADVANCED 
DEMANDED 
EXPANDED 
DEFENDED 
OFFENDED 
EXPENDED 
EXTENDED 
GROUNDED 
BESIEGED 
DETACHED 


MAXIMUM 
HASBEEN 
FIFTEEN 
SIXTEEN 
BETWEEN 
KITCHEN 
WRITTEN 
EXPLAIN 
TERRAIN 
DETRAIN 
ENTRAIN 
CONTAIN 
CAPTAIN 
CONDEMN 
ABANDON 
OPINION 
SESSION 
MISSION 
STATION 
SECTION 
ECHELON 
BALLOON 
PLATOON 
LIAISON 
HORIZON 


LAUNCHED 
FINISHED 
OCCUPIED 
ATTACKED 
REPELLED 
EXPELLED 
ENROLLED 
DISARMED 
ASSIGNED 
RETURNED 
APPEARED 
DECLARED 
PREPARED 
HINDERED 
SUFFERED 
CENTERED 
BATTERED 
LETTERED 
REPAIRED 
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EASTERN 
WESTERN 
FOGHORN 
UNKNOWN 
TOBACCO 
TORPEDO 
WARSHIP 
DEVELOP 
ENVELOP 
NUCLEAR 
SIMILAR 
REGULAR 
CALIBER 
OCTOBER 
OFFICER 
POUNDER 
TRIGGER 
WEATHER 
WHETHER 
ANOTHER 
FARTHER 
FURTHER 
SOLDIER 
CARRIER 
COURIER 


HEAVIER 
TRAWLER 
CRUISER 
AMMETER 
FIGHTER 
STARTER 
QUARTER 
DELIVER 
RECOVER 
AVIATOR 
TRACTOR 
VISITOR 
TACTICS 
ISLANDS 
CHANGES 
ENEMIES 
BATTLES 
GLASSES 
CHASSIS 
ATTACKS 
VESSELS 
PATROLS 
BOMBERS 
NUMBERS 
REPAIRS 


SAILORS 
SECTORS 
COMPASS 
SUCCESS 
USELESS 
ILLNESS 
WITNESS 
ADDRESS 
EXPRESS 
DISMISS 
DISCUSS 
TARGETS 
SURPLUS 
RETREAT 
EXTRACT 
CONTACT 
COLLECT 
RESPECT 
CORRECT 
PROTECT 
INFLICT 
CONDUCT 
TONIGHT 
CIRCUIT 
RECRUIT 


EIGHT LETTER WORDS 


REQUIRED 
RESTORED 
DEFERRED 
CAPTURED 
REPULSED 
COMPOSED 
MANDATED 
DEFEATED 
REPEATED 
DICTATED 
EFFECTED 
INFECTED 
REJECTED 
SELECTED 
BILLETED 
INVENTED 
DEPARTED 
DESERTED 
ESCORTED 


DEPORTED 
REPORTED 
ARRESTED 
ENLISTED 
SURVIVED 
IMPROVED 
OBSERVED 
REVIEWED 
DEPLOYED 
AIRFIELD 
FOOTHOLD 
THOUSAND 
SURROUND 
STANDARD 
OUTBOARD 
OUTGUARD 
WINDWARD 
EASTWARD 
WESTWARD 


DESCRIBE 
ORDNANCE 
DISTANCE 
COMMENCE 
SENTENCE 
ANNOUNCE 
COMMERCE 
ENFILADE 
CONCLUDE 
LATITUDE 
ALTITUDE 
EMPLOYEE 
CARRIAGE 
FUSELAGE 
FRONTAGE 
SABOTAGE 
LANGUAGE 
DISLODGE 
EXCHANGE 


PURSUIT 
ASSAULT 
INSTANT 
ELEMENT 
COMMENT 
CURRENT 
PRESENT 
APPOINT 
FOXTROT 
RECEIPT 
ATTEMPT 
SUPPORT 
SUGGEST 
HIGHEST 
NEAREST 
PROTEST 
REQUEST 
AGAINST 
OUTPOST 
PROVOST 
BOYCOTT 
WITHOUT 
LOOKOUT 
SIMPLEX 
TUESDAY 


PROBABLE 
SUITABLE 
ELIGIBLE 
TERRIBLE 
POSSIBLE 
FLEXIBLE 
ASSEMBLE 
OBSTACLE 
ENCIRCLE 
SCHEDULE 
MARITIME 
AIRPLANE 
JETPLANE 
MEDICINE 
DOCTRINE 
POSTPONE 
SEABORNE 
AIRBORNE 
DEVELOPE 


RAILWAY 
SECRECY 
VACANCY 
WHISKEY 
SIGNIFY 
SATISFY 
RAPIDLY 
QUICKLY 
NIGHTLY 
SHORTLY 
COMPANY 
DESTROY 
PRIMARY 
SUMMARY 
LIBRARY 
JANUARY 
BRIBERY 
BATTERY 
INQUIRY 
CAVALRY 
VICTORY 
EMBASSY 
UTILITY 
SEVENTY 


ENVELOPE 
INSECURE 
PRESSURE 
DECREASE 
EXERCISE 
SURPRISE 
SUSPENSE 
DISPERSE 
TRAVERSE 
DEDICATE 
INDICATE 
INITIATE 
ESTIMATE 
ORDINATE 
DETONATE 
SEPARATE 
EVACUATE 
EXCAVATE 
OBSOLETE 
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COMPLETE 
CONCRETE 
EXPEDITE 
DEFINITE 
OPPOSITE 
CONTINUE 
CRITIQUE 
THATHAVE 
DECISIVE 
POSITIVE 
PRESERVE 
EQUALIZE 
MOBILIZE 
INVADING 
DIVIDING 
BUILDING 
GUARDING 
ENGAGING 
DAMAGING 
MARCHING 
BREAKING 
FLANKING 
TOTALING 
SHELLING 
BATTLING 
SWIMMING 
TRAINING 
PLANNING 
SWEEPING 
SHIPPING 
GROUPING 
ENTERING 
COVERING 
RETIRING 
ADVISING 


MEMORANDA 
STRATEGIC 
AUTOMATIC 
PATRIOTIC 
BALLISTIC 


OPPOSING 
DRESSING 
PRESSING 
CROSSING 
DRIFTING 
FIGHTING 
SIGHTING 
LIMITING 
PAINTING 
PRINTING 
SPOTTING 
DELAYING 
RALLYING 
CARRYING 
FERRYING 
APPROACH 
ENTRENCH 
INTRENCH 
RESEARCH 
DESPATCH 
DISPATCH 
SKIRMISH 
DIMINISH 
ELEVENTH 
ANTITANK 
CODEBOOK 
CHEMICAL 
CLERICAL 
TACTICAL 
CRITICAL 
NAUTICAL 
OFFICIAL 
MATERIAL 
MEMORIAL 
NATIONAL 


INTERNAL 
CORPORAL 
HOSPITAL 
APPROVAL 
MATERIEL 
PARALLEL 
SENTINEL 
SEALEVEL 
PROTOCOL 
MERCIFUL 
TELEGRAM 
AMERICAN 
EUROPEAN 
CIVILIAN 
HAVEBEEN 
NINETEEN 
EIGHTEEN 
THIRTEEN 
FOURTEEN 
CAMPAIGN 
CHAPLAIN 
MAINTAIN 
MOUNTAIN 
BULLETIN 
INVASION 
DECISION 
DIVISION 
LOCATION 
AVIATION 
CITATION 
TAXATION 
JUNCTION 
IGNITION 
POSITION 
FORENOON 


SQUADRON 
GARRISON 
NORTHERN 
SOUTHERN 
CIRCULAR 
DECEMBER 
REMEMBER 
NOVEMBER 
DEFENDER 
RECORDER 
ENGINEER 
TRANSFER 
LAUNCHER 
DECIPHER 
ENCIPHER 
PRISONER 
IMPROPER 
REPEATER 
DESERTER 
DISASTER 
REGISTER 
CANISTER 
COMPUTER 
RECEIVER 
REVOLVER 
OBSERVER 
MANEUVER 
EMPLOYER 
HOWITZER 
CORRIDOR 
SUPERIOR 
INTERIOR 
EXTERIOR 
OPERATOR 


DICTATOR 
DEFECTOR 
DEJECTOR 
DIRECTOR 
DETECTOR 
ASSOONAS 
POLITICS 
COMMANDS 
ADVANCES 
BARRAGES 
MESSAGES 
REMEDIES 
SUPPLIES 
VEHICLES 
MISFIRES 
DEFENSES 
EXPENSES 
PURPOSES 
RESERVES 
ANALYSIS 
BARRACKS 
MISSIONS 
STATIONS 
FACTIONS 
PONTOONS 
WARSHIPS 
OFFICERS 
SOLDIERS 
CARRIERS 
TRAILERS 
TRAWLERS 
CRUISERS 
FIGHTERS 
QUARTERS 
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CARELESS 
WIRELESS 
BUSINESS 
DARKNESS 
CONGRESS 
PROGRESS 
FORTRESS 
DISTRESS 
REDCROSS 
RESPECTS 
ELEMENTS 
ATTEMPTS 
PROTESTS 
OUTPOSTS 
ENORMOUS 
LUMINOUS 
RIGOROUS 
VIGOROUS 
CONTRACT 
INDIRECT 
CONFLICT 
DISTRICT 
INSTRUCT 
AIRCRAFT 
DAYLIGHT 
MIDNIGHT 
PROHIBIT 
SERGEANT 
DOMINANT 
ADJUTANT 
ADJACENT 
INCIDENT 
ARMAMENT 
MOVEMENT 


BEACHHEAD 
SPEARHEAD 
DESCRIBED 
ANNOUNCED 
BLOCKADED 


SUCCEEDED 
PROCEEDED 


COMMANDED 


SUSPENDED 
BOMBARDED 


FORTIFIED 
CANCELLED 
COMPELLED 
DETRAINED 
ENTRAINED 


CONDEMNED 
ECHELONED 
DEVELOPED 
CONQUERED 
PREFERRED 


REGIMENT 
APPARENT 
PASSPORT 
INTEREST 
REENLIST 
WITHDRAW 
WITHDREW 
TOMORROW 
PARALLAX 
SATURDAY 
THURSDAY 
CAUSEWAY 
IDENTIFY 
STRATEGY 
PROBABLY 
ASSEMBLY 
ACTUALLY 
MONOPOLY 
EASTERLY 
WESTERLY 
BOUNDARY 
MILITARY 
SANITARY 
FEBRUARY 
CEMETERY 
ADVISORY 
INFANTRY 
CAPACITY 
FATALITY 
CALAMITY 
VICINITY 
PRIORITY 
ACTIVITY 
CASUALTY 


CONFERRED 
DECREASED 
INCREASED 
CONDENSED 
COLLAPSED 


DISPERSED 
ADDRESSED 
IMPRESSED 
DISCUSSED 
INDICATED 
POPULATED 
ESTIMATED 
DOMINATED 
DETONATED 
SUSPECTED 
CORRECTED 
PROTECTED 
INFLICTED 
COMPLETED 
INHABITED 
EXHIBITED 
ASSAULTED 
APPOINTED 
ATTEMPTED 
PROTESTED 
REQUESTED 
SUBMITTED 
CONTINUED 
DESTROYED 
MOTORIZED 
SEMIRIGID 
RECOMMEND 
REARGUARD 
NORTHWARD 
SOUTHWARD 
AMBULANCE 
DOMINANCE 
CLEARANCE 
ENDURANCE 
ASSURANCE 
ALLOWANCE 
INCIDENCE 
REFERENCE 
INFLUENCE 
REENFORCE 
REINFORCE 
LONGITUDE 
COMMITTEE 
ADVANTAGE 
CARTRIDGE 
CHALLENGE 
AVAILABLE 


UNTENABLE 
DIRIGIBLE 
PRINCIPLE 
HURRICANE 
INTERVENE 
FRONTLINE 
DETERMINE 
TELEPHONE 
INTERFERE 
ELSEWHERE 
SHELLFIRE 
THEREFORE 
PROCEDURE 
PREMATURE 
DEPARTURE 
NAVALBASE 
CRITICISE 
INTERPOSE 
ASSOCIATE 
IMMEDIATE 
OSCILLATE 
CIRCULATE 
DESIGNATE 
ALTERNATE 
COOPERATE 
ELABORATE 
PENETRATE 
REINSTATE 
CIGARETTE 
PARACHUTE 
DESTITUTE 
TECHNIQUE 
EXPANSIVE 
DEFENSIVE 
OFFENSIVE 
EXPENSIVE 
INTENSIVE 
EXTENSIVE 
EXPLOSIVE 
EXCESSIVE 
INCLUSIVE 
EXCLUSIVE 
TENTATIVE 
DEFECTIVE 
EFFECTIVE 
OBJECTIVE 
INCENTIVE 
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EXECUTIVE 
RECOGNIZE 
SERVICING 
ADVANCING 
PRECEDING 
EXTENDING 
REGARDING 
ACCORDING 
INCLUDING 
LAUNCHING 
ATTACKING 
DEBARKING 
REFILLING 
SCREENING 
REMAINING 
OBTAINING 
INCLINING 
BEGINNING 
RETURNING 
PREPARING 
NUMBERING 
CENTERING 
REQUIRING 
OPERATING 
ENLISTING 
RECEIVING 
REVIEWING 
EMPLOYING 
OCCUPYING 
PARAGRAPH 
ESTABLISH 
TWENTIETH 
FIFTEENTH 
SIXTEENTH 
WATERTANK 
TECHNICAL 
CHRONICAL 
PRACTICAL 
POLITICAL 
IDENTICAL 
PRINCIPAL 
DISMISSAL 
CONTINUAL 
PERSONNEL 
CABLEGRAM 
RADIOGRAM 
FIREALARM 


CRITICISM 
MECHANISM 
DIETITIAN 
SEVENTEEN 
SUSPICION 
BATTALION 
REBELLION 
COLLISION 
PROVISION 
EXPANSION 
ASCENSION 
DIMENSION 
EXTENSION 
EXPLOSION 
ADMISSION 
EXCLUSION 
RADIATION 
VARIATION 
INFLATION 
FORMATION 
OPERATION 
SITUATION 
ELEVATION 
OBJECTION 
DIRECTION 
CONDITION 
COALITION 
PARTITION 
DETENTION 
RETENTION 
INTENTION 
ATTENTION 
INVENTION 
PROMOTION 
SEMICOLON 
AFTERNOON 
DISAPPEAR 
IRREGULAR 
SEPTEMBER 
COMMANDER 
SURRENDER 
REMAINDER 
PASSENGER 
MESSENGER 
BRIGADIER 
STRAGGLER 
NEWSPAPER 


CHARACTER 
KILOMETER 
BAROMETER 
GYROMETER 
DESTROYER 
PROJECTOR 
PROTECTOR 
CHAUFFEUR 
LOGISTICS 
STANDARDS 
RESOURCES 
COMPANIES 
BATTERIES 
EMBASSIES 
SEAPLANES 
AIRPLANES 
EXERCISES 
WITNESSES 
ADDRESSES 
ESTIMATES 
CONTINUES 
BUILDINGS 
OFFICIALS 
REPRISALS 
PROPOSALS 
CIVILIANS 
CAMPAIGNS 
MAINTAINS 
DIVISIONS 
MUNITIONS 
POSITIONS 
ENGINEERS 
PRISONERS 
READINESS 
CONFLICTS 
DISTRICTS 
INCIDENTS 
MOVEMENTS 
OUTSKIRTS 
ANONYMOUS 
APPARATUS 
DISINFECT 
INTERDICT 
DIFFICULT 
COMBATANT 
IMPORTANT 


ASSISTANT 
CONFIDENT 
PRESIDENT 
DEPENDENT 
NEGLIGENT 
DEFICIENT 
EFFICIENT 
PLACEMENT 
AGREEMENT 
AMUSEMENT 
STATEMENT 
EQUIPMENT 
GROUPMENT 
INTERMENT 
ALLOTMENT 
PERMANENT 
DIFFERENT 
REPRESENT 
RESTRAINT 
INTERCEPT 
INTERRUPT 
TRANSPORT 
NORTHEAST 
SOUTHEAST 
NORTHWEST 
SOUTHWEST 
INTERVIEW 
YESTERDAY 
WEDNESDAY 
EMERGENCY 
NORTHERLY 
SERIOUSLY 
INSTANTLY 
ACCOMPANY 
ARBITRARY 
NECESSARY 
SECRETARY 
ARTILLERY 
ACCESSORY 
TERRITORY 
LIABILITY 
HOSTILITY 
PROXIMITY 
INDEMNITY 
INTEGRITY 
NECESSITY 
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ATOMICBOMB 
GEOGRAPHIC 
GYROSCOPIC 
DIPLOMATIC 
BRIDGEHEAD 
PRESCRIBED 
REENFORCED 
REINFORCED 
BEENNEEDED 
UNEXPENDED 
APPROACHED 
ENTRENCHED 
DESPATCHED 
DISPATCHED 
THREATENED 
MAINTAINED 
DETERMINED 
ONEHUNDRED 
DECIPHERED 
ENCIPHERED 
COMPRESSED 
DISTRESSED 
DESIGNATED 
RESTRICTED 
INSTRUCTED 
PROHIBITED 
REENLISTED 
MECHANIZED 
CONTRABAND 
UNDERSTAND 
UNDERSTOOD 
COASTGUARD 
POSTOFFICE 
ACCORDANCE 
ALLEGIANCE 
APPEARANCE 
ACCEPTANCE 
RESISTANCE 
ASSISTANCE 
PRECEDENCE 
CONFIDENCE 
NEGLIGENCE 
EXPERIENCE 
PREFERENCE 
DIFFERENCE 
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CONFERENCE 
CAMOUFLAGE 
DEPENDABLE 
EXPENDABLE 
IMPASSABLE 
UNSUITABLE 
ACCEPTABLE 
IMPOSSIBLE 
ASPOSSIBLE 
RECEPTACLE 
MOTORCYCLE 
AUTOMOBILE 
DISCIPLINE 
QUARANTINE 
ENTERPRISE 
TRANSVERSE 
COORDINATE 
ILLUMINATE 
ANTICIPATE 
ILLITERATE 
ILLUSTRATE 
COMPENSATE 
DISTRIBUTE 
SUBSTITUTE 
CONSTITUTE 
COMMUNIQUE 
TWENTYFIVE 
SUCCESSIVE 
IMPRESSIVE 
LOCOMOTIVE 
CENTRALIZE 
NATURALIZE 
DEMOBILIZE 
COMMANDING 
DEBOUCHING 
DETRUCKING 
ENTRUCKING 
ENCIRCLING 
SIGNALLING 
PATROLLING 
OVERCOMING 
DETRAINING 
CONCERNING 
INDICATING 
EVACUATING 


COLLECTING 
CONNECTING 
INFLICTING 
EXPEDITING 
RECRUITING 
ATTEMPTING 
SUPPORTING 
EXTINGUISH 
NINETEENTH 
EIGHTEENTH 
THIRTEENTH 
FOURTEENTH 
WILLATTACK 
ARTIFICIAL 
CREDENTIAL 
ADDITIONAL 
ACCIDENTAL 
REGIMENTAL 
INDIVIDUAL 
WITHDRAWAL 
AIRCONTROL 
SUCCESSFUL 
RESPECTFUL 
MEMORANDUM 
SUSPENSION 
DISPERSION 
CONCESSION 
CONFESSION 
DEPRESSION 
IMPRESSION 
POSSESSION 
SUBMISSION 
COMMISSION 
PERMISSION 
DISCUSSION 
CONCLUSION 
DEDICATION 
INDICATION 
ALLOCATION 
FOUNDATION 
RECREATION 
IRRIGATION 
NAVIGATION 
REGULATION 
POPULATION 


ESTIMATION 
DOMINATION 
DETONATION 
OCCUPATION 
SEPARATION 
DECORATION 
LIMITATION 
SANITATION 
INVITATION 
EVACUATION 
EVALUATION 
EXCAVATION 
COLLECTION 
CONNECTION 
INSPECTION 
CORRECTION 
PROTECTION 
EXHIBITION 
EXPEDITION 
DEFINITION 
AMMUNITION 
OPPOSITION 
PROPORTION 
REVOLUTION 
MACHINEGUN 
BATTLESHIP 
CENSORSHIP 
ARMOREDCAR 
COMMANDEER 
DISPATCHER 
MILLIMETER 
GONIOMETER 
HYDROMETER 
HYGROMETER 
HELICOPTER 
AMBASSADOR 
INSTRUCTOR 
BALLISTICS 
STATISTICS 
CROSSROADS 
DESPATCHES 
DISPATCHES 
ASSEMBLIES 
FACILITIES 
ACTIVITIES 


CASUALTIES 
FRONTLINES 
SUBMARINES 
OBJECTIVES 
ENEMYTANKS 
SUSPICIONS 
COLLISIONS 
PROVISIONS 
EXPLOSIONS 
FORMATIONS 
OPERATIONS 
DIRECTIONS 
CONDITIONS 
TROOPSHIPS 
NEWSPAPERS 
KILOMETERS 
DESTROYERS 
TRANSPORTS 
SUSPICIOUS 
VICTORIOUS 
CIRCUITOUS 
CONTINUOUS 
PHOSPHORUS 
FLASHLIGHT 
COMMANDANT 
LIEUTENANT 
CONTINGENT 
SUFFICIENT 
CONVENIENT 
EQUIVALENT 
ENGAGEMENT 
MANAGEMENT 
EXCITEMENT 
DETACHMENT 
ATTACHMENT 
EXPERIMENT 
ENROLLMENT 
ASSIGNMENT 
ATTAINMENT 
INTERNMENT 
GOVERNMENT 
ASSESSMENT 
COMMITMENT 
DEPARTMENT 
ENLISTMENT 


INSTRUMENT 
DEPLOYMENT 
EMPLOYMENT 
PERSISTENT 


IMPEDIMENTA 
TOPOGRAPHIC 
RECOMMENDED 
PREARRANGED 
ESTABLISHED 
OVERWHELMED 
DISAPPEARED 
SURRENDERED 
ENCOUNTERED 
TRANSFERRED 
DISINFECTED 
REAPPOINTED 
INTERCEPTED 
INTERRUPTED 
CONSTITUTED 
BATTLEFIELD 
PERFORMANCE 
MAINTENANCE 
COINCIDENCE 
SUBSISTENCE 
ACKNOWLEDGE 
CATASTROPHE 
INFLAMMABLE 
RESPONSIBLE 
NAVALBATTLE 
TEMPERATURE 
MANUFACTURE 
SCHOOLHOUSE 
CUSTOMHOUSE 
CERTIFICATE 
COMMUNICATE 
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TRANSPACIFIC 
HYDROGRAPHIC 
UNIDENTIFIED 
COMMISSIONED 
DISSEMINATED 
CONCENTRATED 
DEMONSTRATED 


AIRSUPPORT COMPLETELY ELEMENTARY AUDIBILITY 
CONSPIRACY APPARENTLY LABORATORY VISIBILITY 
DEFICIENCY INCENDIARY TRAJECTORY SIMILARITY 
EFFICIENCY COMMISSARY CAPABILITY INSECURITY 
ELEVEN LETTER WORDS 
INVESTIGATE APPLICATION DESCRIPTION INTELLIGENT 
APPROPRIATE ASSOCIATION CONSUMPTION COEFFICIENT 
APPROXIMATE RETALIATION INSTITUTION BOMBARDMENT 
EXTERMINATE DEBARKATION LIGHTBOMBER REPLACEMENT 
DETERIORATE EMBARKATION HEAVYBOMBER EMPLACEMENT 
CONCENTRATE LEGISLATION RANGEFINDER ENFORCEMENT 
DEMONSTRATE CIRCULATION DYNAMOMETER ARRANGEMENT 
NECESSITATE INFORMATION THERMOMETER CONFINEMENT 
DISCONTINUE EXPLANATION INTERPRETER REQUIREMENT 
SEVENTYFIVE DESIGNATION RECONNOITER MEASUREMENT 
PROGRESSIVE RESIGNATION AERONAUTICS IMPROVEMENT 
RADIOACTIVE EXAMINATION NAVALFORCES CONCEALMENT 
RETROACTIVE PREPARATION ACCESSORIES ECHELONMENT 
DESCRIPTIVE COOPERATION HOSTILITIES DEVELOPMENT 
SYNCHRONIZE IMMIGRATION ENEMYPLANES APPOINTMENT 
APPROACHING INSPIRATION PHILIPPINES COMPARTMENT 
INTERVENING CORPORATION PARENTHESES BELLIGERENT 
ENGINEERING PENETRATION HEAVYLOSSES INCOMPETENT 
INTERFERING ARBITRATION COMMUNIQUES FINGERPRINT 
ALTERNATING COMPUTATION PARENTHESIS DISCREPANCY 
INTERESTING OBSERVATION CREDENTIALS PHOTOGRAPHY 
WITHDRAWING RESERVATION BATTLESHIPS IMMEDIATELY 
DISTINGUISH RESTRICTION ARMOREDCARS EXTENSIVELY 
SEVENTEENTH DISTINCTION CORRECTNESS EFFECTIVELY 
NAVALATTACK DESTRUCTION ENGAGEMENTS PRELIMINARY 
STRATEGICAL INSTRUCTION ASSIGNMENTS CONTROVERSY 
TRADITIONAL RECOGNITION ASSESSMENTS ELECTRICITY 
CONTINENTAL REQUISITION INSTRUMENTS NATIONALITY 
FIRECONTROL COMPOSITION ESTIMATEDAT SUITABILITY 
NATIONALISM DISPOSITION SIGNIFICANT SUPERIORITY 
SMOKESCREEN COMPETITION INDEPENDENT 
TWELVE LETTER WORDS 
DISORGANIZED INTERMEDIATE CONSTITUTING 
SIGNIFICANCE DECENTRALIZE BREAKTHROUGH 
INTELLIGENCE GENERALSTAFF GEOGRAPHICAL 
INTERFERENCE TRANSFERRING CONFIDENTIAL 
INCOMPETENCE ENTERPRISING PRESIDENTIAL 
CONSIDERABLE ILLUMINATING RECREATIONAL 
FIGHTERPLANE DISTRIBUTING AGRICULTURAL 
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DEPARTMENTAL 
UNSUCCESSFUL 
GENERALALARM 
VETERINARIAN 
TRANSMISSION 
VERIFICATION 
CONFISCATION 
COMMENDATION 
CONCILIATION 
CANCELLATION 
PROCLAMATION 
CONFIRMATION 
CONFORMATION 
COORDINATION 
ILLUMINATION 
ANTICIPATION 
REGISTRATION 
ILLUSTRATION 
INAUGURATION 
COMPENSATION 


TRANSATLANTIC 
DISTINGUISHED 
DECENTRALIZED 
DISAPPEARANCE 
IMPRACTICABLE 
INDETERMINATE 
CORRESPONDING 
CONCENTRATING 
COUNTERATTACK 
CHRONOLOGICAL 
CONGRESSIONAL 


CHARACTERISTIC 
RECONNAISSANCE 
DISCONTINUANCE 


CORRESPONDENCE 


ADMINISTRATIVE 
REPRESENTATIVE 
DISTINGUISHING 
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CONVERSATION 
RADIOSTATION 
CONTINUATION 
PRESERVATION 
MOBILIZATION 
ORGANIZATION 
INTERDICTION 
ROADJUNCTION 
INTRODUCTION 
CONSTRUCTION 
INTERVENTION 
INTERCEPTION 
CONSCRIPTION 
INTERRUPTION 
DISTRIBUTION 
SUBSTITUTION 
CONSTITUTION 
NORTHWESTERN 
SOUTHWESTERN 


MARKSMANSHIP 
MEDIUMBOMBER 
COMMISSIONER 
PSYCHROMETER 
SHARPSHOOTER 
DIFFICULTIES 
UNITEDSTATES 
PREPARATIONS 
OBSTRUCTIONS 
INSTRUCTIONS 
LIGHTBOMBERS 
HEAVYBOMBERS 
HEADQUARTERS 
PREPAREDNESS 
COMPLETENESS 
CARELESSNESS 
SEARCHLIGHTS 
REPLACEMENTS 
EMPLACEMENTS 


THIRTEEN LETTER WORDS 


INTERNATIONAL 
SPECIFICATION 
QUALIFICATION 
COMMUNICATION 
ACCOMMODATION 
INVESTIGATION 
DISSEMINATION 
DETERMINATION 
EXTERMINATION 
CONSIDERATION 
CONCENTRATION 


DEMONSTRATION 
QUARTERMASTER 
CIRCUMSTANCES 
DISCREPANCIES 
PRELIMINARIES 
FIGHTERPLANES 
INSTALLATIONS 
MEDIUMBOMBERS 
MISCELLANEOUS 
INSTANTANEOUS 
REENFORCEMENT 


FOURTEEN LETTER WORDS 


RECONNOITERING 
METEOROLOGICAL 
CIRCUMSTANTIAL 
CLASSIFICATION 
IDENTIFICATION 


RECOMMENDATION 


ADMINISTRATION 
INTERPRETATION 
TRANSPORTATION 
CENTRALIZATION 
NATURALIZATION 
DEMOBILIZATION 


MEASUREMENTS 
ADVANTAGEOUS 
SIMULTANEOUS 
ANTIAIRCRAFT 
NONCOMBATANT 
CONVALESCENT 
DISPLACEMENT 
COMMENCEMENT 
ANNOUNCEMENT 
ENTANGLEMENT 
DECIPHERMENT 
ENCIPHERMENT 
REENLISTMENT 
INEFFICIENCY 
SUCCESSFULLY 
RESPECTFULLY 
SATISFACTORY 
INTRODUCTORY 
IRREGULARITY 


REINFORCEMENT 
REIMBURSEMENT 
REINSTATEMENT 
ESTABLISHMENT 
ENTERTAINMENT 
REAPPOINTMENT 
APPROXIMATELY 
EXTRAORDINARY 
REVOLUTIONARY 
DEPENDABILITY 


REORGANIZATION 
RECONSTRUCTION 
IRREGULARITIES 
INVESTIGATIONS 
SATISFACTORILY 
RESPONSIBILITY 


Table D-3. List of words used in military text arranged 
alphabetically according to word pattern. 


AA A CC EPT AA CA 
AA A CC ORDING AA CE LL 
AA O CC UPY AA CO LL APSED 
AA A DD AA DO LL AR 
AA BE DD ING AA DRI LL 
AA LA DD ER AA ENRO- LL 
AA SU DD EN AA FA LL 
AA B EE N AA FA LL ING 
AA CR EE K AA FE LL 
AA F EE L AA FU LL 
AA F EE T AA HI LL 
AA FL EE AA I LL 
AA FL EE T AA INSTA LL 
AA FOURT EE N AA KI LL ED 
AA HASB EE N AA OSCI LL ATE 
AA K EE P AA PATRO LL ING 
AA M EE T AA PAYROLL 
AA PROC EE D AA RA LL Y 
AA R EE NLIST AA REFI LL 
AA S EE AA SHE LL 
AA S EE N AA SHE LL ING 
AA SCR EE N AA SMA _ LL 
AA SIXT EE N AA SPE LL 
AA SP EE D AA VA LL EY 
AA ST EE L AA VI LL AGE 
AA SW EE PING AA WE LL 
AA THR EE AA WI LL 
AA W EE K AA CO MM A 
AA WH EE L AA CO MM AND 
YANK EE AA CO MM ANDER 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 
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AA B OO TH AA MA _ SS 

AA C OO K AA ME SS 

AA C OO RDINATE AA ME S8S_ ING 
AA H OO K AA PA SS 

AA L oO K AA PA SS ED 
AA PLAT OO N AA PA SS_ IVE 
AA PR OO F AA PO SS __ IBLE 
AA SCH OO L AA PRE SS 

AA T OO AA UNLE SS 

AA T OO K AA WITNESS 

AA T OO L AA BA TY EN 
AA TR OO PS AA BA TT ERY 
AA Ww oO DS AA BA TT LE 
AA A PP LY AA BA TT  LESHIP 
AA A PP OINT AA BI TT ER 
AA A PP OINTED AA LI TT ER 
AA A PP ROVE AA OMI TT ED 
AA HA PP EN AA SPO TT ING 
AA MA PP ING AA SUBMI TT ED 
AA SU PP LY AA WRI TT EN 
AA SU PP ORT AA MU ZZ LE 
AA SU PP ORTING AA NO ZZ LE 
AA A RR_ EST AABA AGR EEME NT 
AA A RR_ IVE AABA K EEPE R 
AA CA RR Y AABA CH EESE 

AA CU RR- ENT AABA BR EEZE 

AA DE RR_ ICK AABA MA NNIN G 
AA FE RR Y AABA PLA NNIN G 
AA GA RR_ ISON AABA RU NNIN G 
AA HU RR_ ICANE AABA L OOKO UT 
AA SIE RR A AABA E RROR 

AA TE RR AIN AABA MI RROR 

AA A SS ET AABA TE RROR 

AA A SS IGNED AABA GLA SSES 

AA A SS URE AABA LO SSES 

AA ACRO- SS AABA PA SSES 

AA COMPA SS AABA A SSIS. T 

AA CONGRESS AABA CHA _ SSIS 

AA CRO SS AABAACB A SSESSME NT 
AA CRO SS_ ING AABAACBDEA A SSESSMENTS 
AA DARKNESS AABAB PROC EEDED 

AA DRE SS AABB CO FFEE 

AA DRE SS_ ING AABB BA LLOO N 
AA EMBA SS_ Y AABBAACAC B EENNEEDED 
AA I SS UE AABBCBC SU CCEEDED 
AA LE 8S AABCA BEETLE 

AA LE SS EN AABCA A NNOUN CE 
AA LO SS AABCA F OOTHO LD 
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AABCA 
AABCA 
AABCA 
AABCADEC 
AABCADEC 


AABCADEFEA 


AABCB 
AABCB 
AABCB 
AABCB 


Table D-3—-Continued 


RRIER 
SSETS 
SSUES 
MMITMENT 
TTENTION 


NNOUNCEMEN T 


EENIN G 
FFERE NT 
FFERE D 
FFICI AL 


AABCDECB 
AABCDED 
AABCDEDFC 
AABCDEE 
AABCDEFA 
AABCDEFA 
AABCDEFB 
AABCDEFBA 
AABCDEFC 
AABCDEFC 


TTLEFIEL D 
MMANDED 
MMUNITION 


MMANDEE R 


EENLISTE D 
RREGULAR 
FFENSIVE 
SSEMBLIES 
LLOTMENT 
OOPERATE 


AABCDEFD 
AABCDEFD 
AABCDEFDGA 
AABCDEFGA 
AABCDEFGABF 
AABCDEFGD 


LLUSTRAT E 
SSIGNMEN T 
SSIGNMENTS 
OOPERATIO N 
EENLISTMENT 
TTLESHIPS 


AABCB FFICI ENT 
AABCB LLEGE 
AABCB LLEGE 
AABCB LLETE D 
AABCB MMETE R 
AABCB OODED 
AABCB RRIFI C AABCDEFGDAE OORDINATION 
AABCB TTERE D AABCDEFGDE PPOINTMENT 
AABCBDEB FFERENCE ABA AGA IN 


ow 
Qrtarriararronun®” 


> 


AABCC CCESS ABA AGA INST 
AABCC CCESS ORY ABA ALA RM 
AABCC MMISS ARY ABA ALA MITY 
AABCCB LLATTA CK ABA ALA RY 
AABCCDD MMITTEE ABA AMA 


AABCCDEFBC CCESSORIES ABA ANA 
AABCDA LLEGAL ABA 

AABCDA TTEMPT ABA 

AABCDAB TTEMPTE D ABA 

AABCDB FFENSE ABA 

AABCDB LLENGE ABA 

AABCDB LLISTI. C ABA 

AABCDB RRESTE D ABA 

AABCDB SSENGE R ABA 

AABCDB TTERIE S ABA 

AABCDBA RRENDER ABA TION 
AABCDBABD RRENDERED ABA L 
AABCDBC MMANDAN T ABA LFORCES 
AABCDBD FFENDED ABA 

AABCDBEC LLISTICS ABA 

AABCDD DDRESS ABA 

AABCDD LLNESS ABA 

AABCDDCA DDRESSED ABA 

AABCDDCD DDRESSES ABA BI 
AABCDEB MMUNIQU E ABA 

AABCDEB OOPSHIP ABA BLOCKA 
AABCDEB SSEMBLE ABA GROUN 
AABCDEBC OOPSHIPS ABA GUAR 
AABCDEC MMANDIN G ABA INVA 
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DISPLAC 
PLAC 


Table D-3—Continued 


VATION 
CT 
GRAM 

NT 

NT 

DY 


MY 
RAL 
L 

D 

D 


MEM ORIAL 
NAN CE 
NAN T 

NAN CE 
NIN 

NIN 

NIN 

NIN 

OLO 

OLO 

OLO 

OMO BILE 
OMO TE 
ONO R 
ORO US 
OTO R 

OTO RIZED 
OvO ST 
PIP E 

POP ULATED 
RAR Y 

RTR IDGE 


ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABA 
ABAA 
ABAA 
ABAACC 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAB 
ABAC 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 


Table D-3—Continued 


RYR UN 
SAS TER 
SES 

SIS T 
SUS PEND 
SYS TEM 
TAT OR 
TAT ION 
TIT UDE 
TIT UDE 
TIT LE 
TOT AL 
TOT ALING 
UGU 

USU 

UTU 

VIV ED 
EBEE N 
SESS ION 
TATTOO 
ININ 
ININ 
ININ 
ININ 
ININ 
ININ 
ININ 

ISIS 
PAPA 
THTH E 
TITI ON 
EBEC 
ANADA 
ANAMA 
ECEDE 
ELEME 
ELEME 
ELEVE 
EMETE 
EVERE 
IBILI TY 
IBITI ON 
ICINI TY 
ILITI ES 
ILITI A 
IMINI SH 
IMITI NG 


ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACA 
ABACADA 
ABACADB 
ABACADBA 
ABACADC 
ABACADD 
ABACADDA 
ABACADEC 
ABACB 
ABACB 
ABACB 
ABACB 
ABACB 
ABACB 
ABACBDEC 
ABACBDEC 
ABACBDEFGFAG 
ABACC 
ABACC 
ABACC 
ABACC 
ABACC 
ABACCA 
ABACCA 
ABACCA 
ABACCDACC 
ABACCDC 
ABACCDEFEA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 


Dnmwmaooxrna 


INITI 

TRIGI 

IRIGI 

ISITI 

IVILI 

IVISI 
OCOMO TIVE 
ONOPO LY 
OTOCO L 
TITUT E 
UNUSUAL 
ISIBILI TY 
INITION 
ECEDENCE 
INITIAT E 
ETENESS 
AVALATTA CK 
IVISIONS 
ACANC Y 
ATANT 
ATAST ROPHE 
ETECT OR 
ISITS 
MEMBE R 
ETENTION 
ETENTION 
NONCOMBATANT 
EBELL ION 
ECESS ARY 
ECESS ITY 
ELESS 
ELESS 
ARALLA X 
EPELLE D 
OMORRO W 
ELESSNESS 
ARALLEL 
ECESSITATE 
ALASKA 
ARABIA 
AVALBA SE 
ECEIVE 
ECEMBE R 
EFENSE 
EJECTE D 
ELEASE 
ELECTE D 
EMEDIE 
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ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDA 
ABACDAAC 
ABACDAACD 
ABACDAC 
ABACDAD 
ABACDAED 
ABACDAEEC 
ABACDB 
ABACDB 
ABACDB 
ABACDBA 
ABACDC 
ABACDC 
ABACDC 
ABACDCA 
ABACDCCA 
ABACDCCAD 
ABACDCEA 


ABACDCECFGHIE 


ABACDD 
ABACDD 
ABACDDEC 
ABACDEA 
ABACDEA 
ABACDEA 
ABACDEA 
ABACDEAD 
ABACDEAFGE 
ABACDEB 
ABACDEB 
ABACDEBFA 
ABACDEC 
ABACDEC 
ABACDEC 
ABACDECA 
ABACDECFBA 
ABACDECFGB 
ABACDED 
ABACDED 
ABACDED 
ABACDEDEDC 
ABACDEDFBA 
ABACDEDFGA 


Table D-3—Continued 


EMERGE NCY 
ENEMIE S 
EPEATE D 
EVENUE 
NKNOWN 
OMOTIO N 
EVENTEEN 
EVENTEENT H 
ESERTER 
EFENSES 
AVAILABL E 
AVALBATTL E 
ATALIT Y 
NONYMO US 
OLONEL 
EREFORE 
ECEIVI NG 
EVENIN G 
MOMETE R 
IMITATI ON 
NINETEEN 
NINETEENT H 
TATEMENT 


ETEOROLOGICAL 


FIFTEEN 
RTRESS 
FIFTEENT H 
ELEVATE 
EVELOPE 
IFICATION 
IMILARI TY 
SUSPENSE 
SUSPENSION 
ANATION 
OPOGRAP HIC 
ECEPTACLE 
ABANDON 
AMAGING 
ARANTIN E 
ENETRATE 
ETERIORATE 
ENETRATION 
APABILI TY 
OTORCYC LE 
SUSPICION 


ENERALALAR M 


SUSPICIOUS 
SUSPICIONS 


ABACDEFA 
ABACDEFA 
ABACDEFA 
ABACDEFA 
ABACDEFA 
ABACDEFA 
ABACDEFAF 
ABACDEFB 
ABACDEFB 
ABACDEFC 
ABACDEFCDFE 
ABACDEFCFD 
ABACDEFD 
ABACDEFDF 
ABACDEFE 
ABACDEFGA 
ABACDEFGB 
ABACDEFGBA 
ABACDEFGBA 
ABACDEFGBEHF 
ABACDEFGDHH 
ABACDEFGE 
ABACDEFGHA 
ABACDEFGHIA 
ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA. 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 


EFECTIVE 
EFENSIVE 
ELEPHONE 
ETERMINE 
EVELOPME NT 
EXERCISE 
EXERCISES 
DEDICATE 
ENEMYTAN KS 
DEDICATI ON 
ETERINARIAN 
ELECTRICIT Y 
SUSPECTE D 
SUSPENDED 
ANALYSIS 
EXECUTIVE 
POPULATIO N 
ENEMYPLANE 
EVENTYFIVE 
ETERMINATION 
ENERALSTAFF 
MEMORANDA 
MEMORANDUM 
ECENTRALIZE 
AFFA IR 
APPA RENT 
APPA RENTLY 
ARRA NGE 
ARRA CKS 
ARRA GE 
ASSA ULT 
ASSA GE 
ASSA BLE 
ATTA CH 
ATTA CK 
ATTA IN 
ATTA 


mroudyosy a 
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ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 

ABBA 
ABBAB 
ABBAB 
ABBACA 
ABBACA 
ABBACB 
ABBACDA 
ABBACDA 
ABBACDB 
ABBACDEA 
ABBACDEDA 
ABBACDEFA 
ABBACDEFA 
ABBACDEFA 
ABBACDEFCD 
ABBACDEFDB 
ABBACDEFEC 


ABBACDEFGB 
ABBCA 


ADBUA 


ABBCA 
ABBCA 
ABBCA 
ABBCA 
ABBCA 
ABBCA 
ABBCA 


x= 


ETTE R 
IFFI CULT 
ILLI NG 
ILLI NG 
ILLI NG 
IMMI NG 
IPPI NG 
ISSI_ LE 

ISSI NG 
ISSI. ON 
ISSI. ON 
ISSI ON 
ITTI NG 
NOON 

NOON 

OLLO W 
OMMO N 
OPPO SE 
OPPO SITE 
OTTO M 
AGGAG E 
ESSES 
APPARA TUS 
ETTERE D 
ESSELS 
EFFECTE D 
ESSENGE R 
ISSIONS 
IRRIGATI ON 
OPPOSITIO N 
EFFECTIVE 
IFFICULTI ES 
IMMIGRATI ON 
ILLITERATE 
ATTAINMENT 
ARRANGEMEN T 
ATTACHMENT 
ANNUA L 
APPEA R 
APPEA R 
ARRIA GE 
ETTLE 

ISSUI NG 
TEENT H 
TEENT H 
UFFEU R 
URROU ND 


ADDTDADANICD 
ADP GARAIWUE 


ABBCADAEFC 
ABBCADC 
ABBCBBDA 
ABBCBDA 
ABBCBDAED 
ABBCCDAB 
ABBCDA 
ABBCDA 
ABBCDA 
ABBCDA 
ABBCDA 
ABBCDA 
ABBCDAB 
ABBCDAB 
ABBCDAEA 
ABBCDAEFC 
ABBCDAEFC 
ABBCDAEFGAE 
ABBCDAEFGAHE 
ABBCDAEFGAHE 
ABBCDBCEA 
ABBCDCA 
ABBCDCA 
ABBCDCAED 
ABBCDCAED 
ABBCDCEFA 
ABBCDDCA 
ABBCDDCA 
ABBCDDCEAFGC 
ABBCDEA 
ABBCDEA 
ABBCDEA 
ABBCDEA 
ABBCDEA 
ABBCDEAFB 
ABBCDEAFB 
ABBCDEAFBC 
ABBCDEAFBGBC 
ABBCDEAFD 
ABBCDEAFEC 
ABBCDEAFGC 
ABBCDEAFGC 
ABBCDEAFGHF 
ABBCDEFGA 
ABBCDEFGA 
ABBCDEFGA 
ABBCDEFGBA 


DIS 


Q 


Q 


SH 


APPEARANCE 
APPEARE D 
OSSESSIO N 
ASSISTA NCE 
ASSISTANT 
ASSOONAS 
ALLOWA NCE 
APPROA CH 
ARRIVA L 
ASSURA NCE 
ESSAGE 
ILLUMI NATE 
ESSAGES 
ORRIDOR 
ELLIGERE NT 
ALLOCATIO N 
IMMEDIATE 
ILLUMINATIN G 
ILLUMINATION 
ISSEMINATION 
APPROPRIA TE 
EFFICIE NT 
OLLISIO N 
EFFICIENC Y 
OLLISIONS 
ADDITIONA L 
OMMISSIO N 
OMMISSIO NER 
ACCOMMODATIO N 
ACCOMPA NY 
APPROVA L 
ASSOCIA TE 
ELLFIRE 
ERRIBLE 
ACCORDANC E 
REENFORCE 
ACCEPTANCE 
REENFORCEMEN T 
APPLICATI ON 
ASSOCIATIO N 
ACCEPTABLE 
ALLEGIANCE 
ORRESPONDIN G 
ACCIDENTA L 
APPROXIMA TE 
OCCUPATIO N 
IRREGULARI TY 


IRREGULARITIES 
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ABBCDEFGEA 
ABBCDEFGHAD 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 


Table D-3—Continued 


ILLUSTRATI ON 
OMMENDATION 
ACKA GE 
ACUA TING 
ACUA TION 
ADIA L 
ADIA TE 
ADJA CENT 
ADUA L 
ADVA NCE 
AGRA 

ALFA 

ALUA 
ALWA 
AMPA 
ANDA 
ANUA 
ANUA 
ANVA 

APLA 

APTA 

AREA 

ARKA 
ARKA 

ASIA 

ASTA 

ASUA 

ASUA 

AVIA TOR 
BARB ED 
BOMB 
BOMB ARD 
BOMB ER 
BOMB ER 
BRIB E 
BULB 

CANC EL 
CHEC K 
CIRC LE 
CIRC ULATE 
CONC 
CONC 
DRED 

EADE 

EAGE 

EAGE 
EAME 
EAME 


EARE 
EASE 
EASE 
EASE 
EAVE 
ECHE 
ECKE 
ECTE 
EDGE 
EIZE 
ELIE F 
ELPE R 
ELVE 
EMBE R 
ENCE 
ENSE 
ENTE 
ENTE 
ENVE 
EQUE 
ERCE 
ERGE 
ERIE 
ERSE 
ERVE 
ESPE 
ESTE 
ESTE 
ETHE 
EUVE 
EVIE 
EXCE 
EXPE 
EXPE 
EXTE 
GAUG 
GEOG RAPHIC 
GING 
HICH 
HIGH 
HIGH ER 
HIGH EST 
ICT] M 
IDNI GHT 
IFTI NG 
IFTI NG 
IGNI 
ILDI 


ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 


Zaavwvwd 


QUA 


Table D-3—Continued 


INDI A 
INDI CATE 
INDI RECT 
IPTI ON 
IQUI D 
IRFI ELD 
ISFI RE 
ISHI NG 
ITHI N 
LOIL 

MAIM 
NDIN G 
NFAN TRY 
NFIN E 
NION 
NKEN 
NKIN G 
NLAN D 
NTEN D 
NTIN UAL 
NTIN UE 
NVEN T 
OCTO BER 
OCTO R 
OGHO RN 
OISO N 
OMPO SED 
ONVO Y 
ORMO US 
OSIO N 
PUMP 
PURP OSE 
RBOR 
RBOR NE 
RDER 
RDER 
RDER S$ 
REAR 
RECR UIT 
REPR ISAL 


ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA — 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCA 
ABCAA 
ABCAA 
ABCAA 
ABCAA 
ABCAA 
ABCAAB 
ABCAAB 
ABCAACDEB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 
ABCAB 


AOCAD 


ABCAB 
ABCABA 
ABCABB 


PRO 


Tnn 


ye BUwuvowds 


RTER S 
RUAR Y 
RWAR D 
SORS HIP 
SUNS ET 
TANT 

TART 

TECT 

TENT 

TENT H 
TEST 

TEXT 

THAT 

TRAT EGIC 
TRAT EGY 
UGOU T 
UNSUITABLE 
URSU E 
URSU IT 
UTGU ARD 
ECREE 
EGREE 
ETWEE N 
SCUSS 

SPOSS IBLE 
ONTOON 
THATTH E 
REARRANGE D 
ARFAR E 
ECREC Y 
ERVER 
HETHE R 
INDIN 
INDIN 
INKIN 
INTIN 
INTIN 
NTENT 
ORPOR AL 
RECRE ATION 
RIORI TY 


Oa Man 


SEASE 
TECTE D 
TESTE D 
UTPUT 
ERFERE 
ISMISS 
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ABCABB D 
ABCABC 

ABCABCA 

ABCABDA S 
ABCABDB 
ABCABDBEFGFHIB 
ABCABDBEFGFHIED 
ABCABDC 

ABCABDEFA C 
ABCABDEFGHD 

ABCAC 

ABCAC N 
ABCAC 

ABCAC P 
ABCAC PRO 
ABCACA D 
ABCACB O 
ABCACBDEC 
ABCACDEFD 
ABCADA 
ABCADA 


ATISVATVA 
ADULAVA 


ABCADA 
ABCADA 
ABCADAB CO 
ABCADAC 8 


ABIOATYALM 
ADLAVAL 


ABCADAEC 
ABCADAEFB 

ABCADAEFC 8 
ABCADAEFCE S 
ABCADAEFGHF 

ABCADB 

ABCADB 

ABCADB 

ABCADB W 
ABCADB 
ABCADB 
ABCADB 
ABCADB 
ABCADB 
ABCADBA 
ABCADBC 
ABCADBCEFCGG 
ABCADBD 
ABCADBEFD 
ABCADC R 
ABCADC ST 


Awan 
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ISMISS AL 
THATHA VE 
ENTENTE 
ENTENCE 
REPRESE NT 
REPRESENTATIVE 
REPRESENTATIONS 
RETREAT 
ORPORATIO N 
RECREATIONA L 
ARMAM ENT 
EARER 

PROPO SE 
RAIRI_ E 

TESTS 

IETITI AN 
RDERED 
PROPORTIO N 
PROPOSALS 
ALMANA C 
ELIEVE 


QAITODA MH 


BNIBNE DU 
ESIEGE D 
EVIEWE D 
NTINENT AL 
EALEVEL 


TNIMNTUITN TT 


INDIVID UAL 
IGNITION 
TENTATIVE 
IGNIFICAN T 
IGNIFICANC E 
SUBSISTENCE 
ATLANTIC 
BRIBER Y 
CIRCUI T 
EDNESD AY 
ISTICS 
OSIONS 
PREPAR ING 
PROPER 
PROPER 
INSIGNI A 
PREPARE 
PREPAREDNESS 
PREPARA TION 
CIRCUITOU  §S 
ADIATI ON 
ANDARD 


ABCADC Vv 
ABCADC 

ABCADC 

ABCADC R 
ABCADC 

ABCADC I 
ABCADC 

ABCADC s 
ABCADC 
ABCADCA 
ABCADCB 
ABCADCB 
ABCADCEFBGABC 
ABCADCEFGED 
ABCADCEFGEHBC 
ABCADCEFGEHC 
ABCADD D 
ABCADD 

ABCADD D 
ABCADD P 
ABCADD B 


ABDOATINTIA 
ADLAVUA 


ABCADDA 

ABCADDECCFA 
ABCADDEFA 

ABCADEA 

ABCADEA 

ABCADEA 

ABCADEA 

ABCADEA 

ABCADEA 

ABCADEAB Cc 
ABCADEAE 

ABCADEAE 

ABCADEAE 

ABCADEAFA 
ABCADEAFGA 

ABCADEB Cc 
ABCADEB 

ABCADEB R 
ABCADEB 

ABCADEB M 
ABCADEBCE 

ABCADEC M 
ABCADEC 8 
ABCADEC 
ABCADECA 
ABCADECAFD D 


co 


OUR nNnDT 


ARIATI ON 

ASIATI C 
AVIATION 
EVIEWI NG 
EXTENT 

NVENTE D 
TACTIC § 
TARTER 

ZIGZAG 

NVENIEN T 
NDENSED 
TACTICAL 
ENTERTAINMENT 
CONCENTRATE 
CONCENTRATION 
CONCENTRATIN G 
EPRESS ION 
EXCESS 

ISTILL 

OSTOFF ICE 
OYCOTT 
AMBASSA DOR 
EXPELLE D 
UNSUCCESSFUL 
EXCESSIVE 
ADVANTA 
ADVANTA 
ECREASE 
EPTEMBE R 
EQUESTE D 
ISCIPLI NE 
NTINGENT 
EXPENDED 
EXPENSES 
EXTENDED 
ELSEWHERE 
EXPERIENCE 
ENTERIN G 
ENTERIN G 
ESPECTS 
INCIDEN T 
ISFIRES 
INCIDENCE 
ANDATED 
ECRETAR Y 
OSCOPIC 
REARGUAR D 
ISTINCTION 


Pat r lat nial 


ABCADEDA co 
ABCADEDAFB 

ABCADEDBD 

ABCADEDBDE 

ABCADEDC LI 
ABCADEDFGA 
ABCADEDFGDBC 


ADOANRHOOADN 
ADULAVERVIFUrD 


ABCADEE P 
ABCADEEBFGHC 

ABCADEED 

ABCADEEFBC 


ADNAN DORAN 
ADUAUVELPUL 


ABCADEFA 

ABCADEFA 

ABCADEFA 

ABCADEFA 

ABCADEFAB 

ABCADEFAB D 
ABCADEFABGADE D 
ABCADEFAGB 
ABCADEFB 
ABCADEFBA 
ABCADEFC 
ABCADEFC 
ABCADEFC U 
ABCADEFCGHB 

ABCADEFD 

ABCADEFD 

ABCADEFD 

ABCADEFE 

ABCADEFE 

ABCADEFE 

ABCADEFE 

ABCADEFE G 
ABCADEFE 

ABCADEFE 

ABCADEFEA C 
ABCADEFGA 

ABCADEFGA 

ABCADEFGAF 

ABCADEFGB C 
ABCADEFGB 

ABCADEFGBC 

ABCADEFGC 

ABCADEFGC s 
ABCADEFGD 


ar) 


EXT 
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| ABCADECFC CONCERNIN G | ABCADEFGDC CONCEALMENT | 


NFINEMEN T 
INVITATION 
SUBSTITUT E 
SUBSTITUTI ON 
EUTENANT 
ENTERPRISE 
CONCILIATION 


RAITDDNIGINI OO 
Dain LIA INLOLIN Le 


ROGRESS 
CANCELLATION 
CANCELLE D 
CONCESSION 


DonYpRaavy 
HRVUNBOOLVE 


ECHELONE D 
ENVELOPE 
EXPEDITE 
EXPERIME NT 
INDICATIN G 
ISTINGUIS H 
ISTINGUISHING 
INDICATION 
ADVANCED 
RAORDINAR Y 
BOMBARDM ENT 
CIRCULAR 
NTENABLE 
RETROACTIVE 
ADVANCIN G 
EXTENDIN G 
EXTERIOR 
CONCRETE 
EXPEDITI NG 
EXPEDITI ON 
OBSOLETE 
ONIOMETE R 
PURPOSES 
RECRUITI NG 
OMPOSITIO N 
EXPENSIVE 
EXTENSIVE 
ECHELONMEN T 
ASUALTIES 
CIRCULATI ON 
CONCLUSION 
INDICATED 
TRATEGICA L 
EXTENSION 


ABCADEFGE 
ABCADEFGF 
ABCADEFGHAB 
ABCADEFGHCA 
ABCADEFGHCFIG 
ABCADEFGHEIGCF 
ABCADEFGHH 


ADOANDDOLITA TR 
ADVUAUVELSF UIA Sr 


ABCADEFGHIB 
ABCADEFGHIB 
ABCADEFGHIGBH 
ABCBA 


ARMDA 
ADUDA 


ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBA 
ABCBAA 
ABCBAAB 
ABCBAB 
ABCBAB 
ABCBABDEB 
ABCBABDEB 
ABCBADA 
ABCBADB 
ABCBADB 
ABCBADB 
ABCBADBC 
ABCBADEB 
ABCBCDBA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 
ABCBDA 


SPE 


MU 


REPRISALS 
BOMBARDED 
ONFORMATION 
EXTERMINATE 
EXTERMINATION 
REORGANIZATION 
ESPECTFULL Y 


OITIDCTINGATANIODS 
VW ULV LANL 


RETROACTIVE 
GEOGRAPHICA L 
CIRCUMSTANTIA L 
AWKWA RD 


CADAL 


ITV 
Ar AW 


iil 


LETEL Y 
CIFIC 

CIFIC 
DERED 
DIVID E 
GARAG E 
ITATI ON 
LEVEL 
REFER 
REFER 
RESER VATION 
RESER VATION 
TAXAT ION 
TILIT Y 
TILIT Y 
TIVIT Y 
SELESS 
REFERRE D 
DIVIDI NG 
TIVITI ES 
REFERENCE 
REFERENCE 
MINIMUM 
RESERVE 
RESERVE 
REVERSE 
RESERVES 
CIFICATI ON 
REMEMBER 
DEFEND 
DEPEND 
NITION S§S 
RESEAR CH 


STATES 
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ABCBDA 
ABCBDA 
ABCBDAB 
ABCBDAB 
ABCBDABA 
ABCBDABD 
ABCBDABDEA 
ABCBDAEFGB 
ABCBDAEFGHG 
ABCBDCBA 
ABCBDDBA 
ABCBDEA 
ABCBDEA 
ABCBDEA 
ABCBDEAEC 
ABCBDEBA 
ABCBDEBA 
ABCBDEBA 
ABCBDEBA 
ABCBDEFA 
ABCBDEFA 
ABCBDEFBA 
ABCBDEFGA 
ABCBDEFGBA 
ABCBDEFGHFA 
ABCBDEFGHIJBA 
ABCCA 
ABCCA 
ABCCA 
ABCCABDEC 
ABCCBADED 
ABCCBCA 
ABCCBDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDA 
ABCCDAA 
ABCCDAAEB 
ABCCDAAEBFF 
ABCCDAAEFD 
ABCCDAB 
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STATUS 
TEREST 
DEFENDE R 
NGAGING 
DEFENDED 
DEPENDEN T 
STATISTICS 
DEPENDABLE 
DEPENDABILI TY 
PARAGRAP H 
DEFERRED 
CONOMIC 
DAMAGED 
LITICAL 
MANAGEMEN T 
DEFEATED 
DESERTED 
RECEIVER 
REPEATER 
REJECTOR 
STATIONS 
DEVELOPED 
ESISTANCE 
DETERMINED 
DISINFECTED 
DECENTRALIZED 
LITTL E 
PASSP ORT 
TREET 
ROSSROADS 
MILLIMETE R 
GINNING 
LAMMABL E 
COLLEC T 
CORREC T 
RIGGER 
RUBBER 
RUNNER 
SPOOLS 
SPOONS 
SUGGES T 
SUPPOS E 
TURRET 
SUCCESS 
SUCCESSFUL 
SUCCESSFULL Y 
SUCCESSIVE 
RESSURE 


ABCCDAEC 
ABCCDAED 
ABCCDAEFB 
ABCCDAEFB 
ABCCDAEFBC 
ABCCDAEFC 
ABCCDAEFDGG 
ABCCDEA 
ABCCDEA 
ABCCDEA 
ABCCDEA 
ABCCDEAB 
ABCCDEAD 
ABCCDEAD 
ABCCDEADCDE 
ABCCDEBFGHDA 
ABCCDEFA 
ABCCDEFA 
ABCCDEFAGHFBE 
ABCCDEFBGHDGAD 
ABCCDEFGA 
ABCCDEFGHAFG 
ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 

ABCDA 


TERRITOR Y 
CORRECTE D 
COLLECTIO N 
CORRECTIO N 
CONNECTION 
CONNECTIN G 
CORRECTNESS 
GASSING 
GETTING 
RAGGLER 
TERRUPT 
TERRUPTE D 
COMMENCE 
COMMERCE 
COMMENCEMEN T 
DISSEMINATED 
COMMUNIC ATE 
SUPPLIES 
COMMUNICATION 
CORRESPONDENCE 
EAPPOINTE D 
EAPPOINTMENT 
ABOTA 

AILWA Y 
ALPHA 

ANIMA 

ANITA 

ARSHA 

ARTIA 

ASTWA 

ATURA 

ATURA 

CHNIC 

COUNC 

EACHE 

EAGUE 

EASTE 

EASTE 

EATHE 

EAVIE 

ECURE 

ECURE 

EDUCE 

EDULE 

EFORE 

EFUGE 

EFUSE 

EGIME NT 
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ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 


EXT 


WAR 


EGIME NTAL 
EITHE R 
ELAGE 
ELIVE R 
ENADE 
ERASE 
ERATE 
ESCUE 
ESIDE NT 
ESUME 
EVICE 

EVISE 

GOING 
HOUGH 
IGHTI NG 
INFLI CT 
INGUI SH 
INQUI RE 
INQUI RY 
INSPI RE 
LOCAL 
NCHIN G 
NDEMN 
NEGUN 
NOTIN G 
NSION 
NTAIN 
NTAIN 
NTERN AL 
NTLIN E 
NTREN CH 
ONTRO L 
ORIZO N 
OUTBO ARD 
PROMP T 
RECOR D 
REPOR T 
RETUR N 
RIMAR Y 
RIVER 
ROGER 
RTHER 
RTHER 
RTHER LY 
SATIS FY 
SHIPS 
SHIPS 
THIRT Y 


ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDA 
ABCDAA 
ABCDAA 
ABCDAA 
ABCDAA 
ABCDAA 
ABCDAAD 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDAB 
ABCDABA 
ABCDABAB 
ABCDABC 
ABCDABC 
ABCDABCEFD 
ABCDABEFA 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDAC 
ABCDACB 
ABCDACDAEFGB 
ABCDACEFDAF 
ABCDAD 
ABCDAD 
ABCDAD 
ABCDADC 
ABCDADEDAFB 
ABCDADEFEAGC 


BU 
DI 


SP 


ES 


ZS 


THOUT 
TRACT 
TRACT 
TRUCT 
TRUCT ION 
TWENT Y 
UREAU 
WESTW ARD 
EFUGEE 
ODEBOO K 
SINESS 
STRESS 
STRESS 
ORENOON 
HURCH 
DECIDE 
DECODE 
EARHEA D 
EDUCED 
ENTREN CH 
ERASER 
POSTPO NE 
RETIRE 
TIMATI ON 
DECIDED 
INCLININ G 
AINTAIN 
AINTAIN ED 
PHOSPHORUS 
ENTRENCHE D 
ANGUAG E 
ANYWAY 
ERNMEN T 
NSTANT 
NSTANT LY 
OXTROT 
SPERSE 
TRICTI ON 
TRIOTI C 
NDEMNED 
NSTANTANEOUS 
COINCIDENCE 
MOVEME NT 
MUSEME NT 
RIGORO US 
ANITATI ON 
INSTITUTION 
ANTIAIRCRAFT 
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ABCDAEA 
ABCDAEA 
ABCDAEAB 
ABCDAEABD 
ABCDAEAE 
ABCDAEB 
ABCDAEB 
ABCDAEB 
ABCDAEB 
ABCDAEB 
ABCDAEB 
ABCDAEB 
ABCDAEBA 
ABCDAEBC 
ABCDAEBFBDC 
ABCDAEBFC 
ABCDAEC 
ABCDAEC 
ABCDAEC 
ABCDAECA 
ABCEAECAB 
ABCDAECB 
ABCDAECD 
ABCDAECE 
ABCDAECFD 
ABCDAED 
ABCDAEE 
ABCDAEE 
ABCDAEE 
ABCDAEEFAB 
ABCDAEFA 
ABCDAEFAB 
ABCDAEFB 
ABCDAEFBE 
ABCDAEFC 
ABCDAEFC 
ABCDAEFC 
ABCDAEFC 
ABCDAEFCA 
ABCDAEFCA 
ABCDAEFD 
ABCDAEFD 
ABCDAEFD 
ABCDAEFD 
ABCDAEFDB 
ABCDAEFDE 
ABCDAEFE 
ABCDAEFE 
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EXTREME 
MAXIMUM 
ITABILIT Y 
TEDSTATES 
ENTHESES 
IGHTING 
IGHTING 
RAILROA D 
REPORTE D 
RETURNE D 
TRACTOR 
TRUCTOR 
RECORDER 
TONATION 
NIDENTIFIED 


SATISFACT ORY 


AVERAGE 
ISTRICT 
OUTPOST 
TWENTIET H 
NTERNMENT 
ISTRICTS 
ABORATOR Y 
OUTPOSTS 
AMINATION 
RAVERSE 
ACTUALL Y 
EXPRESS 
THIRTEE N 
THIRTEENTH 
ERWHELME D 
INFLICTIN G 
RESCRIBE D 
NEHUNDRED 
ADIOACTI VE 
ANUFACTU RE 
ESIDENTI AL 
ISTRIBUT E 
ISTRIBUTI NG 
ISTRIBUTI ON 
LASHLIGH T 
ONTROVER SY 
SCENSION 
WINDWARD 
RESTRICTE D 
RESTRICTI ON 
ENTHESIS 
RETURNIN G 


ABCDAEFEGE 
ABCDAEFF 
ABCDAEFGAHB 
ABCDAEFGC 
ABCDAEFGD 
ABCDAEFGFE 
ABCDAEFGHC 
ABCDAEFGHFBC 
ABCDBA 
ABCDBA 
ABCDBA 
ABCDBA 
ABCDBA 
ABCDBA 
ABCDBAA 
ABCDBAAEDBC 
ABCDBAB 
ABCDBAD 
ABCDBAEAD 
ABCDBAEBE 
ABCDBBA 
ABCDBBA 
ABCDBBDEA 
ABCDBCAEB 
ABCDBEA 
ABCDBEA 
ABCDBEA 
ABCDBEAB 
ABCDBEAE 
ABCDBEAFB 
ABCDBEAFCDB 
ABCDBEAFD 
ABCDBEAFD 
ABCDBECA 
ABCDBEFAGABC 
ABCDBEFAGEB 
ABCDBEFBA 
ABCDBEFCDAB 
ABCDBEFGA 
ABCDBEFGAB 
ABCDBEFGBCHIA 
ABCDBEFGHA 
ABCDCA 
ABCDCA 
ABCDCA 
ABCDCA 
ABCDCA 
ABCDCA 


SPONSIBILI TY 
REDCROSS 
INSPIRATION 
REGARDING 
RESTRAINT 
ANSPACIFIC 
TWENTYFIVE 
CONSCRIPTION 
ACTICA L 
ATERTA NK 
ENGINE 
ENTINE L 
EVOLVE 
ITUATI ON 
ENGINEE R 
ENGINEERING 
LIABILI TY 
TALIATI ON 
ISPOSITIO N 
NEXPENDED 
ANTENNA 
ISCUSSI ON 
NSMISSION 
INTENTION 
INCENDI ARY 
OTECTIO N 
TERCEPT 
TERCEPTE D 
ONTINUOU §S 
INVENTION 
ARTERMASTER 
INCENTIVE 
INTENSIVE 
NCIRCLIN G 
ENTANGLEMENT 
TEMPERATURE 
DECREASED 
ONTINUATION 
YESTERDAY 
ARMOREDCAR 
DISTINGUISHED 
ERFORMANCE 
AIRCRA FT 
CRITIC 

CRITIC AL 
EFICIE NT 
ENGAGE 
OSITIO N 


ABCDCA 
ABCDCA 
ABCDCAAC 
ABCDCAB 
ABCDCABCA 
ABCDCAC 
ABCDCAC 
ABCDCAD 
ABCDCAEAB 
ABCDCAEB 
ABCDCAED 
ABCDCAED 
ABCDCAEFD 


ABCDCAEFDGHEGA 


ABCDCBABC 
ABCDCBCEA 
ABCDCEA 
ABCDCEA 
ABCDCEA 
ABCDCEA 
ABCDCEA 
ABCDCEAFC 
ABCDCEAFE 
ABCDCEBA 
ABCDCECA 
ABCDCECDA 
ABCDCEFGAB 
ABCDCEFGCA 
ABCDCEFGCA 
ABCDDA 
ABCDDA 
ABCDDA 
ABCDDAB 
ABCDDAEACBE 
ABCDDAEFAF 
ABCDDAEFGHICE 
ABCDDEA 
ABCDDEA 
ABCDDEA 
ABCDDEAEC 
ABCDDECDFA 
ABCDDEFCGHA 
ABCDDEFEACGE 
ABCDDEFGGEDBA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
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OVISIO N 
REALAR M 
PHILIPPI NES 
ANTITAN K 
NDEPENDEN T 
CRITICI SE 
CRITICI SM 
OPINION 
ENGAGEMEN T 
OSITIONS 
EFICIENC Y 
OVISIONS 
CHARACTER 
CHARACTERISTIC 
TERPRETER 
STILITIES 
DGEHEAD 
EDICINE 
EFINITE 
EPARATE 
SURPRIS E 
ALIFICATI ON 
ERSISTENT 
ELIGIBLE 
ESTITUTE 
NSTITUTIN G 
PHOTOGRAPH Y 
OBILIZATIO N 
OBILIZATIO N 
ECOMME ND 
OBACCO 

SHELLS 
EACHHEA D 
INEFFICIENC Y 
ECOMMENDED 
ECOMMENDATION 
DROPPED 
RSUPPOR T 
RTILLER Y 
COEFFICIE NT 
SCHOOLHOUS E 
SCELLANEOUS 
CLASSIFICATION 
ECONNAISSANCE 
AERONA UTICS 
AILHEA D 
AIRPLA NE 
AMBULA NCE 


ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 


CONSID 
INT 
Ss 


ASTGUA RD 
ATERIA L 
ATURDA Y 
AUSEWA Y 
AUTICA L 
CHANIC 
CHEMIC AL 
CONDUC T 
DISLOD GE 
DOWNED 
ECAUSE 
ECIPHE R 
ECLARE 
ECTIVE 
ECTURE 
EHICLE S 
ENCODE 
ENSATE 
ENTIRE 
EPLACE 
EPULSE 
ERABLE 
ERPOSE 
ERVICE 
EUROPE 
EUROPE 
EXCITE 
HROUGH 
IDENTI CAL 
IDENTI FY 
INHABI TED 
IRECTI ON 
MEDIUM 
NCHRON IZE 
NCTION 
NFIDEN T 
NOTHIN G 
NTRAIN 
OCATIO N 
OLUTIO N 
ORATIO N 
ORPEDO 
OVERCO MING 
RAILER S 
RAWLER 
RECTOR 
REPAIR 
RTHWAR D 
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ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEA 
ABCDEAA 
ABCDEAAE 
ABCDEAAFED 
ABCDEAB 
ABCDEAB 
ABCDEAB 
ABCDEAB 
ABCDEAB 
ABCDEAB 
ABCDEAB 
ABCDEABA 
ABCDEABD 
ABCDEABE 
ABCDEABFB 
ABCDEABFD 
ABCDEABFDC 
ABCDEABFE 
ABCDEABFFGHD 
ABCDEAC 
ABCDEAC 
ABCDEAD 
ABCDEAD 
ABCDEAD 
ABCDEADFD 
ABCDEAE 
ABCDEAE 
ABCDEAE 
ABCDEAE 
ABCDEAEFGC 
ABCDEAFA 
ABCDEAFAGE 
ABCDEAFAGHEAID 
ABCDEAFB 
ABCDEAFB 
ABCDEAFBC 
ABCDEAFC 
ABCDEAFC 
ABCDEAFC 
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RUISER 
SLANDS 
STRIPS 

SUNRIS E 
TARGET 
THEAST 
THREAT 
THWEST 
TWELFT H 
UMINOU SS 
EIGHTEE N 
SUBMISSI ON 
EIGHTEENTH 
INVADIN G 
LEXIBLE 
NATIONA L 
REPAIRE D 
REQUIRE 
RESTORE D 
TSKIRTS 
DEMANDED 
IMPEDIME NTA 
OMICBOMB 
REQUIREME NT 
NATIONALI SM 
NATIONALIT Y 
MARKSMANS__HIP 
SHARPSHOOTER 
AUTOMATIC 
RCONTRO L 
CONTACT 
ICTORIO US 
RUISERS 
THREATENE D 
ENCODED 
ERMANEN T 
FORTIFI ED 
REQUIRI NG 
TRADITIONA L 
EPLACEME NT 
EXCITEMENT 
IDENTIFICATION 
CLERICAL 
INVASION 
RESOURCES 
IGNATION 
IGNATION 
NFIDENTI AL 


ABCDEAFD 
ABCDEAFE 
ABCDEAFE 
ABCDEAFE 
ABCDEAFF 
ABCDEAFGA 
ABCDEAFGAFB 
ABCDEAFGD 
ABCDEAFGE 
ABCDEAFGEE 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBA 
ABCDEBAB 
ABCDEBAED 
ABCDEBFA 
ABCDEBFAGA 
ABCDEBFCAGBF 
ABCDEBFDGA 
ABCDEBFGAF 
ABCDEBFGHA 
ABCDEBFGHBCGIA 
ABCDECA 
ABCDECA 
ABCDECA 
ABCDECA 
ABCDECAB 
ABCDECAC 
ABCDECACFE 
ABCDECAFCDA 
ABCDECBA 
ABCDECBA 
ABCDECBA 
ABCDECBAFB 
ABCDECCFA 
ABCDECDCAFC 
ABCDECFA 
ABCDECFA 
ABCDECFBA 
ABCDECFEA 
ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 


IMENSION 
ADJUTANT 
INTERIOR 
NFLUENCE 
EADINESS 
ECIPHERME NT 
MEDIUMBOMBE R 
LEGISLATI ON 
MPARTMENT 
SMOKESCREE N 
DELAYED 
ETONATE 
INDEMNI TY 
ISPERSI ON 
RECOVER 
SURPLUS 
ARBITRAR Y 
ARBITRATI ON 
RIGADIER 
ENCOUNTERE D 
INTERNATIONA L 
NAVIGATION 
EADQUARTER § 
ESPONSIBLE 
NATURALIZATION 
NLISTIN G 
PRINCIP AL 
PRINCIP LE 
SKIRMIS H 
NTERMENT 
NTERVENE 
AINTENANCE 
TRANSATLANTIC 
NEGLIGEN T 
REVOLVER 
ROTECTOR 
NEGLIGENCE 
DISCUSSED 
NTERFERENCE 
ENCIRCLE 
EVACUATE 
SEAPLANES 
STANDARDS 
EWSPAPE R 
MARITIM E 
NTRABAN D 
OALITIO N 
ROMETER 


ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDA 
ABCDEDAB 
ABCDEDAC 
ABCDEDAFC 
ABCDEDFA 
ABCDEDFA 
ABCDEDFA 
ABCDEDFAC 
ABCDEDFAC 
ABCDEDFACDGB 
ABCDEDFCAB 
ABCDEDFCGAHB 
ABCDEDFDA 
ABCDEDFDEAB 
ABCDEDFDGHAIF 
ABCDEDFGA 
ABCDEDFGA 
ABCDEDFGABHED 
ABCDEDFGADB 
ABCDEDFGHAGD 
ABCDEDFGHAGDIE 
ABCDEEA 
ABCDEEA 
ABCDEEA 
ABCDEEACB 
ABCDEEAFDBC 
ABCDEEAFDBGD 
ABCDEEDFGBA 
ABCDEEDFGBAFE 
ABCDEEFAB 
ABCDEEFAB 
ABCDEEFAE 
ABCDEEFDGFA 
ABCDEEFGCAHB 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
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ROMETER 
ROMETER 
ROMETER 
ROMETER 
ONDITION 
OGNITION 
EWSPAPERS 
DICTATED 
EXCAVATE 
EXHIBITE D 
ANTICIPAT E 
CLEARANCE 
ANTICIPATION 
INTERESTIN G 
INAUGURATION 
ARTIFICIAL 
ONSTITUTION 
CHRONOLOGICAL 
OCLAMATIO N 
RELIMINAR Y 
INDETERMINATE 
RELIMINARIE S 
ADMINISTRATIVE 
ADMINISTRATION 
ENROLLE D 
ERSONNE L 
IMPOSSI BLE 
IGNALLING 
INTELLIGENT 
INTELLIGENCE 
RECONNOITER 


RECONNOITERIN G 


ENROLLMEN T 
ONFESSION 
EMBASSIES 
DISAPPEARED 
INTERRUPTION 
ABLEGRA M 
AMERICA N 
AMOUFLA GE 
CHRONIC AL 
CONFLIC T 
CREPANC Y 
EABORNE 
EMPLOYE R 
ENCIPHE R 
ENFORCE 
ENLISTE D 


ABCDEFA 


ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFA 
ABCDEFAA 
ABCDEFAAF 
ABCDEFAAGC 
ABCDEFAB 
ABCDEFAB 
ABCDEFAB 
ABCDEFABA 
ABCDEFAC 
ABCDEFAG 
ABCDEFACB 
ABCDEFACD 
ABCDEFACGF 
ABCDEFAD 
ABCDEFAD 
ABCDEFAD 
ABCDEFAD 
ABCDEFAD 
ABCDEFAD 
ABCDEFADB 
ABCDEFADF 
ABCDEFAE 
ABCDEFAEGHEC 
ABCDEFAF 
ABCDEFAF 
ABCDEFAFCD 
ABCDEFAGA 
ABCDEFAGAB 
ABCDEFAGB 
ABCDEFAGB 
ABCDEFAGB 


EPLOYME NT 
EQUIPME NT 
ERPLANE 
ESCORTE D 
ESCRIBE 
ETPLANE 
EXCLUDE 
INCLUSI VE 
LOGICAL 
ORMATIO N 
RANSFER 
REGULAR 
RISONER 
SAILORS 
SECTORS 
SERIOUS LY 
STABLIS H 
TONIGHT 
EMPLOYEE 
RANSFERRE D 
RANSFERRIN G 
INCLUDIN G 
RADIOGRA M 
REMATURE 
EMPLACEME NT 
INTEGRIT Y 
RISONERS 
TRODUCTOR Y 
ALTERNATE 
ALTERNATIN G 
CONTRACT 
ESTROYER 
INTERVIE W 
OPERATOR 
RECONTRO L 
ROCEDURE 
ESTROYERS 
RANSVERSE 
ISCONTIN UE 
ISCONTINUANC E 
EXPANDED 
MPROVEME NT 
ADIOSTATIO N 
ENCIPHERE D 
ENFORCEMEN T 
ETACHMENT 
INFLATION 
REINFORCE 
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ABCDEFAGB 
ABCDEFAGBDB 
ABCEDFAGBHBD 
ABCDEFAGC 
ABCDEFAGCAHB 
ABCDEFAGE 
ABCDEFAGEC 
ABCDEFAGFD 
ABCDEFAGHAB 
ABCDEFAGHEBC 
ABCDEFAGHFAIB 
ABCDEFAGHFAIBE 
ABCDEFAGHFD 
ABCDEFAGHIF 
ABCDEFBA 
ABCDEFBA 
ABCDEFBA 
ABCDEFBA 
ABCDEFBA 
ABCDEFBA 
ABCEDFBA 
ABCDEFBA 
ABCDEFBA 
ABCDEFBAB 
ABCDEFBABGHD 
ABCDEFBGA 
ABCDEFBGBA 
ABCDEFCA 
ABCDEFCA 
ABCDEFCAB 
ABCDEFCAD 
ABCDEFCAGFC 
ABCDEFCBA 
ABCDEFCCFA 
ABCDEFCEA 
ABCDEFCGA 
ABCDEFDA 
ABCDEFDAB 
ABCDEFDBAB 
ABCDEFDBCAGB 
ABCDEFDEAB 
ABCDEFDGAB 
ABCDEFDGAHCD 
ABCDEFDGHA 
ABCDEFEA 
ABCDEFEAB 
ABCDEFEAGACE 
ABCDEFEAGDB 


DEM 
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TRAJECTOR Y 
REIMBURSEME NT 
REINFORCEMEN T 
INTERDICT 
INTERDICTION 
EPARTMENT 
EPARTMENTA L 
REGISTRATI ON 
ENCIPHERMEN T 
CONFISCATION 
INVESTIGATION 
INVESTIGATIONS 
INVESTIGATE 
REAKTHROUGH 
DECLARED 
DEPARTED 
DEPLOYED 
DEPORTED 
DETACHED 
EMPLOYME NT 
ENTRAINE D 
REGISTER 
ROJECTOR 
MEASUREME NT 
MEASUREMENTS 
ENDURANCE 
DECIPHERED 
ESTIMATE 
NORTHERN 
ESTIMATES 
OMINATION 
ESTIMATEDAT 
DETONATED 
DISTRESSED 
DISPERSED 
ELABORATE 
EPARTURE 
USTOMHOUS E 
INTERVENIN G 
INTERVENTION 
INTERFERIN G 
ONSTRATION 
INTERMEDIATE 
HYDROGRAPH IC 
EINSTATE 
INGERPRIN T 
EINSTATEMENT 
CERTIFICATE 


ABCDEFECACD 
ABCDEFECAE 
ABCDEFEDCGCAHB 
ABCDEFEFA 
ABCDEFEGA 
ABCDEFEGA 
ABCDEFFA 
ABCDEFFA 
ABCDEFFAGE 
ABCDEFFEDAGBC 
ABCDEFFGAB 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 
ABCDEFGA 


-ABCDEFGAB 


ABCDEFGAB 
ABCDEFGAB 
ABCDEFGABF 
ABCDEFGAC 
ABCDEFGAC 
ABCDEFGACB 
ABCDEFGAD 
ABCDEFGAD 
ABCDEFGADG 
ABCDEFGAEHBC 
ABCDEFGAFE 
ABCDEFGAG 
ABCDEFGAHB 
ABCDEFGAHCGIDE 


BmHes 


DI 


THERMOMETER 
CONFERENCE 
INTERPRETATION 
OMPETITIO N 
EMOBILIZE 
OMPUTATIO N 
DERSTOOD 
IMPRESSI ON 
IMPRESSIVE 
INSTALLATIONS 
ONGRESSION AL 
DISARMED 
ECHANIZE D 
ECHNIQUE 
ECOGNIZE 
ELICOPTE R 
ENFILADE 
EQUALIZE 
EQUIVALE NT 
ESIGNATE 
EXCHANGE 
GROUPING 
GUARDING 
INSECURI TY 
IPLOMATI C 
NTRUCKIN G 
NUMBERIN G 
OBJECTIO N 
OPERATIO N 
SOLDIERS 
SPATCHES 
WITHDRAW 
WITHDREW 
ESPATCHES 
NDERSTAND 
WITHDRAWI NG 
ENLISTMENT 
NSTRUMENT 
OUNDATION 
NSTRUMENTS 
SOUTHEAST 
SOUTHWEST 
SOUTHWESTE RN 
CONSTRUCTION 
IMPRACTICA BLE 
WITHDRAWA L 
INSPECTION 
RECONSTRUCTION 


ABCDEFGBA 
ABCDEFGBA 
ABCDEFGBA 
ABCDEFGBA 
ABCDEFGBA 


ABCDEFGBACAHGD 


ABCDEFGBAE 
ABCDEFGBHA 
ABCDEFGBHIAJC 
ABCDEFGCAG 
ABCDEFGCHEA 
ABCDEFGDAHB 
ABCDEFGDAHBC 
ABCDEFGDBFHA 
ABCDEFGDHAIC 
ABCDEFGDHFAE 
ABCDEFGEA 
ABCDEFGEHA 
ABCDEFGFABF 
ABCDEFGFAG 
ABCDEFGGAG 
ABCDEFGHA 
ABCDEFGHA 
ABCDEFGHA 
ABCDEFGHA 
ABCDEFGHA 


Table D-3—Continued 


DESCRIBED 
DESTROYED 
DETRAINED 
REMAINDER 
TRANSPORT 


TRANSPORTATION 


TRANSPORTS 
ESTABLISHE D 
ESTABLISHMENT 
CONFIDENCE 
RANGEFINDER 
INSTRUCTION 
INSTRUCTIONS 
NTRALIZATION 
OBSTRUCTIONS 
ORGANIZATION 
EAVYBOMBE R 
ESCRIPTIVE 
NCOMPETENCE 
NCOMPETENT 
EAVYLOSSES 
CONSPIRAC Y 
DOMINATED 
ENTRALIZE 
EXCLUSIVE 
EXPANSIVE 


ABCDEFGHA 
ABCDEFGHA 
ABCDEFGHAB 
ABCDEFGHADB 
ABCDEFGHAGC 
ABCDEFGHBA 
ABCDEFGHBA 
ABCDEFGHBIJA 
ABCDEFGHCAEB 
ABCDEFGHCAEB 
ABCDEFGHDAB 
ABCDEFGHDGCA 
ABCDEFGHDIJA 
ABCDEFGHEEHA 
ABCDEFGHFA 
ABCDEFGHFCAG 
ABCDEFGHIA 
ABCDEFGHIA 
ABCDEFGHIA 
ABCDEFGHIAB 
ABCDEFGHIAE 
ABCDEFGHIAF 
ABCDEFGHIDAB 
ABCDEFGHIFJA 
ABCDEFGHIGBA 
ABCDEFGHIJDA 


EXPLOSIVE 
MECHANISM 
ONSUMPTION 
INFORMATION 


CONVALESCEN T 


DESIGNATED 
DESPATCHED 
DISORGANIZED 
INTRODUCTION 
ISCREPANCIES 
ONFIRMATION 
NORTHWESTERN 


REVOLUTIONAR Y 
COUNTERATTAC K 


EMONSTRATE 
AGRICULTURAL 
DISPATCHED 
OBSERVATIO N 
SUBMARINES 
ONVERSATION 
OMPENSATION 
OADJUNCTION 
ONSIDERATION 
SEARCHLIGHTS 
DEMONSTRATED 
SIMULTANEOUS 


D-37 


Table D-4. List of general digraphic idiomorphs. 


FO RC ED 
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Table D-4—Continued 


-Q UA 
-I 
-A 

-D 

_T 

-C|ON CE NT RA TI ON 

Slee c -C]ON FL AG RA TI ON 

MA TU R -cl on SI DE RA TI on | 


QU AR| TE RM AS TE]R- 


IN| TE RR UP TE]D- IN CL IN IN| G— 
-F ORITI FI CA TI JON MAJIN TA IN IN] G— 


-I|}NS TA LL AT IO NS 


—P| RE 
-D EF EN;SI VE PO SI |TI ON 
AB -—- AB AB 
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Table D-5. List of Playfair digraphic idiomorphs. 
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Table D-5—Continued 


TI ON 


VE 


TH 
TI ON 
ME 


ED 
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Table D-5—Continued 


AB -— -- —— —~ BA 


DE MO NS TR AT ED 
NO TI FI CA TI ON 
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E NE MY 


> 


Table D-6. List of four-square digraphic idiomorphs 
(grouped by number of significant letters in the idiomorphic pattern). 


A- A- 
CK 
NV 
D E 
MM 
SL 
PL 
PL 
GN 
IM 
IC 
c RY 
N 
RO RE 
ME IZ 
ME EL 
TH 
TH 
GE 
UT T 
EE 
H 
Y 
ID AD 
Vv IT 
W RA 
DD NA 
UN N 
ND N 
GN N 
LE 
TA 
MU 
H 
P 
T RO 
RE T 
RE E 
RI R 
SI CE 
SI 
SI 
SO 
SQ ON 
TE NE 
TO D 
TU 
UN | L 


j 


TWO LETTERS 
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Table D-6—Continued 


As 2 Se eG. SorAs 
Ico MM IS SI ON ED| 
-B -B 
AN TI 
UN 
OB ST 
E 
T 
R D 
PR EP N 
A SS 
B 
A E 
5 E 
A DV 
TY 
CH 
CH ME NT 
H N 
M T 
Y 
VE 
he B AT 
K 
ow 
B 
EE N ee 
A PP RO 
L AU 
1 MM LY 
IN 
TE Y 
M IS EO US 
TI ON 
N I 
SO N M 
D 
IN G M 
AL D 
CT IVE A 
Cc Vv 
Cc 
SU PE RI I 
M ED I 
RT S$ A 
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Table D-6—Continued 


-B -- -- -- -B 


REC OM ME ND ED 
HE AV YL OS SE{S 
R EC |OM ME ND AT IO|N 
ce MU NI CA ae 
R EC JON NO IT ER INIG 


THREE LETTERS 


A- A- A- 
N AV AL BA|SE 
RIEQ UI SI TIJON 
A- A- -- A- 


[RE qu ES TE|D 


-B -B -B 


eT 
BA RD ME 
EL EM EN 
GA GE ME 


NT 
TS 
NT 


B OM 


EN 


FOUR LETTERS 


AB A- -B 


HIEA DQ UAIRT ER S$ 
EL EV EN 


AB -B A- 


CA NC EL 
REiCO NN AI/SS AN CE 


AB -B -- A- 
AD VA NC ED 

EN EM YT AN|KS 
AB -- A- -B 


[si GH TI NG! 


A- AB -B 


AD DI TION AL 


A- AB -- -B 
[so UT HW ES|T 


A- A- -B -B 


w [iT HD RA WAIL 


A- A- -- A- A- 


[co MM AN DI NG 


A- A- -- -B -B 


[RE QU IR EM EN T| 


A- -B AB 


MOR NI NG | 


PIOS TP ONI|E 


A- -B -B -- A- 


[RE CO NN O! TE|R 


A- -B -- AB 


[iN TE RD 1c |t 


Aa cBi Asc AS 2p 


s [AT IS FA CT oR ly 


Ae. 220 As Gee. 


[pr SP AT CH Es | 
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Table D-6—Continued 


[Ro AD JU NC TI ON | 


-B AB A- 


DI SP,;OS IT IO(|N 
PjOS IT IO|N 
PR ES EN|T 


-B A- AB 


RE|PE AT ED| 
-B A- A- -B 


DE ST RO velR 


uINS UC CE ss| Fu L 


“BAS -=+-A+ <B 
[ME DI UM BO MBIER 


2B As 2 =B A+ 
[vi si Bt xi ty! 
-B A- -- -- AB 


lin FO RM AT 1olN 


-B A- -- -- A- -B 


[in ST AL LA TI on! 


2B: XD. <B-. Se. Sb 


[CR OS SR OA ps| 
-B -D -D -B 


AIIRS UP PO RT| 


-B -D -- -D -B 


IN ST RU CT 10] 
CION ST RU CT IOIN 


-B -- A- AB 
F IG HT [ER PL AN Es | 


SR) ie AS reais te: JAB 


E|ST AB LI SH ME NT| 


-B -- -B A- A- 


[EN CO UN TE REID 


-B -- -- -B -D -D 


[RE IN FO RC EM EN|T 


FIVE LETTERS 


A- -B AB -- -B 


[NA VA LA TT ACIK 


A- -B -- -B AB 


R EC|ON NA IS SA NCIE 


2B: A+ A= =-+ AB 


[pi ST RI BU TIloN 


-B A- -B AB 


RE IPL AC EM EN|T 


=B Dt. 2D. SB USD 


[IN ST RU CT 10 NS| 


Table D-6—Continued 


SIX LETTERS 


AB CB C- A- 


plos IT 10 ns | 


AB -D -D AB 
CION DI TI ON 

RA DI OG RA[M 
A- A- -B AB A- 


[RE QU IS IT IOIN 


A- CB -- A- CB 


Q UAIRT ER MA ST ER| 


A- CB -- CB A- 


[sc HO OL HO uslE 


A- -- CB A- -- CB 


[ip EN TI FI CA TIlON 


-B AB AD -D 


Alp IN IS TRIAT IVE 


SEVEN LETTERS 


-B AD -- -B -D AD 


[RE EN FO RC EM EN|T 


EIGHT LETTERS 


AB -B AD -- -B AD 


I Qu AR TE RM AS TE|R 


AB -B C- AB CB 


[EM PL AC EM EN|T 


AB -D C- AD C- -B 


[iN TE RD IC TI on | 
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AA 

AA 

AA 

AA 
AA(5)A 
AA 

AA 

AA 

AA 

AA 
AA(5)A 
AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 
AA(5)A 
AA 

AA 

AA 

AA 
AA(1)A 
AA 
AA(1)A 
AA(2)AA(I)A 
AA(2)A 
AA 
AA(1I)A 
AA(1)A 
AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 


Table D-7. List of words containing like letters repeated at various intervals. 


aa 
aS 


DM 


162) 
CacOO,RPrP RPP P+ > > DP > 


2) 


CH 

COFF 
COMMAND 
COMMITT 
CR 

DECR 
DEGR 
EIGHT 
EIGHT 
EMPLOY 
ENGIN 
ENGIN 


BBER 

BBLE 
CCEPT 
CCEPTABLE 
CCEPTANCE 
CCESS 
CCESSORY 
CCIDENTAL 
CCOMPANY 
CCOMMODATION 
CCORDANCE 
CCORDING 
CCUPATION 
CCUPY 
CCEEDED 
CCESS 
CCESSFUL 
CCESSFULLY 
CCESSIVE 
CCO 
CCESSFUL 
DD 
DDITIONAL 
DDRESS 
DDRESSED 
DDRESSES 
DDING 
DDER 

DDEN 
EEMENT 
EEN 

EEDED 
EENNEEDED 
EETLE 

EEN 

EEZE 

EESE 

EE 

EER 

EE 

EEK 

EE 

EE 

EEN 

EENTH 

EE 

EER 

EERING 


AAQ)A 


AA(I)A 
AA(5)A 
AA(5)A(I)A 
AA 

AA(5)A 
AA(6)A 

AA 


AA(I)A 
AA 
AA 
AA 


SEVENT 
SEVENT 
SIXT 

SIXT 
SMOKESCR 


EEL 

EET 

EEN 
EENTH 
EE 

EET 

EEN 
EENTH 
EEN 

EEN 

EED 

EEP 
EEPER 
EET 

EEN 
EENTH 
EED 
EEDED 
EENFORCE 
EENFORCEMENT 
EENLIST 
EENLISTED 
EENLISTMENT 
EE 

EEN 
EENING 
EE 

EEN 

EEN 
EENTH 
EEN 
EENTH 
EEN 

EED 

EEL 

EET 
EEDED 
EEPING 
EEN 
EENTH 
EE 

EEK 

EEL 

EE 

FFAIR 
FFEUR 
FFICIENT 
FFEE 


AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA GENERALSTA 
AA INE 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 


AA 
AA 
AA 
AA 
AA 
AA 
AA(1)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 


AA 
AA 
AA 
AA 
AA 
AA 
AA 


AA 
AA 
AA 
AA 


a 
= 
< 
ce) 
SS. 


oeoooooo°cj°o 


> 
Q 
a 
> Pr Pr Pr Pr > > > 


o 
wo 
>> o> 


Table D-7—Continued 


FFERENCE 
FFERENT 
FFICULT 
FFICULTIES 
FFECT 
FFECTED 
FFECTIVE 
FFICIENT 
FFICIENCY 


FFORT 

FF 
FFICIENCY 
FF 

FF 

FFEND 
FFENDED 
FFENSE 
FFENSIVE 
FFICE 
FFICER 
FFICIAL 


FFICE 
FF 
FFER 
FFERED 
FFICIENT 
FFIC 
GGAGE 
GGY 
GGLER 
GGEST 
GGER 
HHEAD 
LLY 

LL 
LLEGE 


LLEGIANCE 
LLIED 
LLIES 
LLOCATION 
LLOTMENT 
LLOW 
LLOWANCE 


LLY 
LLERY 
LLISTICS 
LLOON 


AA(3)A 


“E] xy > ee | 
Zeoterr 


ele nl eo | 


LLIGERENT 
LLET 
LLETED 
LLETIN 

LL 

LLATION 
LLED 

LL 

LLENGE 
LLAPSED 
LLECT 
LLECTION 
LLEGE 
LLISION 
LLED 

LL 

LLAR 

LL 

LL 

LLED 
LLMENT 
LLED 

LL 

LLING 

LL 

LLING 
LLOW 

LL 

LL 

LL 

LLEGAL 
LLITERATE 
LLNESS 
LLUMINATE 
LLUMINATING 
LLUMINATION 
LLUSTRATE 
LLUSTRATION 
LL 
LLATIONS 
LLIGENCE 
LLIGENT 
LLED 

LLING 
LLIMETER 
LLANEOUS 
LLATE 
LLAX 
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AA(I)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA(4)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA(2)A 
AA 
AA 
AA 
AA 


PARA 
PATRO 
PAYRO 

RA 

REBE 

REFI 

REFI 

REPE 
RESPECTFU 
SHE 

SHE 

SHE 

SHE 

SHE 

SIGNA 

SMA 

SPE 
SUCCESSFU 
VA 

VI 

WE 


Table D-7—-Continued 


LLEL 
LLING 
LL 
LLY 
LLION 
LL 
LLING 
LLED 
LLY 
LL 
LLED 
LLFIRE 
LLING 
LLS 
LLING 
LL 

LL 


LL 

LL 

LLATTACK 
MMODATION 
MMETER 
MMUNITION 
MMA 

MMAND 
MMANDANT 
MMANDED 
MMANDEER 
MMANDER 
MMANDING 
MMENCE 
MMENCEMENT 
MMEND 
MMENDATION 
MMENT 
MMERCE 
MMISSARY 
MMISSION 
MMISSIONER 
MMIT 
MMITMENT 
MMITTEE 
MMON 
MMUNICATE 
MMUNICATION 


AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 
AA(2)A 
AA(2)A(4)A 
AA 

AA 

AA 

AA 
AA(I)A 
AA 

AA 
AA(4)A 
AA(5)A 
AA 

AA 
AA(I)A 
AA 
AA()A 
AA(5)A 
AA 
AA(6)A 
AA 
AA(I)A 
AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 
AA(6)A 
AA 


INFLA 
JA 
RECO 
RECO 
RECO 


RU 

RU 

TO 
AFTERN 
ASS 
BALL 


MMUNIQUE 
MMUTE 
MMER 
MMEDIATE 
MMIGRATION 
MMABLE 
MMING 
MMEND 
MMENDATION 
MMENDED 
MMARY 
MMER 

MMIT 

MMON 
MMING 
NNEX 
NNOUNCE 
NNOUNCEMENT 
NNUAL 

NNA 

NNER 
NNEEDED 
NNING 

NNOT 

NNEL 
NNECTING 
NNECTION 
NNER 

NNER 

NNING 

NNEL 

NNING 
NNAISSANCE 
NNOITER 
NNOITERING 
NNER 

NNING 
NNAGE 

OON 

OONAS 

OON 

OOK 

OOTH 

OOK 

OOK 
OOPERATE 
OOPERATION 
OORDINATE 


AA(7)A 
AA(2)A 
AA 
AA 
AA 
AA(I)A 
AA 
AA 
AA 
AA 
AA 
AA(2)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA(2)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 


SCH 


UNDERST 
WwW 


a 
a 
as 


rb > Pr Pr Pr rr PP > PP > > 


= 
fa) 
> 


DISA 
DISA 
DRO 
HA 


Table D-7—Continued 


OORDINATION AA MA 
OOTHOLD AA 0 
OON AA i) 
OOK AA Oo 
OOK AA PHILI 
OOKOUT AA REA 
OON AA REA 
OON AA SHI 
OON AA STO 
OOF AA SU 
OOL AA SU 
OOLHOUSE AA SU 
OOTER AA SU 
OON AA SU 
OOLS AA A 
OONS AA A 
00 AA A 
oO AA A 
OOK AA A 
OOL AA A 
OOPS AA BA 
OOPSHIP AA BA 
OOPSHIPS AA CA 
OOD AA(2)A CA 
OODED AA CA 
OODS AA CONFE 
PPORT AA co 
PPARATUS AA co 
PPARENT AA co 
PPARENTLY AA co 
PPEAR AA co 
PPEARANCE AA co 
PPEARED AA(3)A co 
PPLICATION AA CU 
PPLY AA DEFE 
PPOINT AA DE 
PPOINTED AA(I)A E 
PPOINTMENT AA FE 
PPROACH AA GA 
PPROPRIATE AA HU 
PPROVAL AA INTE 
PPROVE AA INTE 
PPROXIMATE AA INTE 
PPEAR AA(5)A I 
PPEARANCE AA(5)A I 
PPEARED AA(5)A I 
PPED AA I 
PPEN AA(I)A MI 


PPING 
PPOSE 
PPOSITE 
PPOSITION 
PPINES 
PPOINTED 
PPOINTMENT 
PPING 
PPED 
PPLIES 
PPLY 
PPORT 
PPORTING 
PPOSE 
RRANGE 
RRANGEMENT 
RREST 
RRESTED 
RRIVAL 
RRIVE 
RRACKS 
RRAGE 
RRIAGE 
RRIER 

RRY 

RRED 
RRECT 


“RRECTED 


RRECTION 
RRECTNESS 


RRESPONDENCE 


RRESPONDING 
RRIDOR 
RRENT 
RRED 
RRICK 
RROR 

RRY 
RRISON 
RRICANE 
RRUPT 
RRUPTED 
RRUPTION 
RREGULAR 


RREGULARITIES 


RREGULARITY 
RRIGATION 
RROR 
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AA 

AA 

AA 
AA(4)A 
AA(4)A 
AA 

AA 

AA 

AA 
AA(3)A 
AA(I)A 
AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 

AA 
AA(I)A 
AA 

AA 

AA 

AA 

AA 
AA(6)A 
AA 
AA(4)A 
AA(1)AA(4)A 
AA 
AA(2)A 
AA 

AA 
AA(7)A 
AA(1)A 
AA(I)A 
AA(I)A 
AA 

AA 
AA(4)A 
AA 

AA 

AA 

AA 

AA 
AA(2)AA 
AA(I)A 
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SU 
SU 


TE 

TE 

TE 

TE 

TE 
TOMO 
TRANSFE 
TRANSFE 
TU 
ACCE 
ACCE 
ACRO 
ADDRE 
ADDRE 
ADDRE 
ADMI 
AMBA 
ASPO 

A 

A 


> 
RN 
e231 
> 


> rrr Prrrrrrr > > > 


BUSINE 
CARELE 
CARELESSNE 
CARELE 

CHA 


Table D-7—Continued 


RRANGED 
RRED 

RRA 
RRENDER 
RRENDERED 
RROUND 
RRAIN 
RRIBLE 
RRIFIC 
RRITORY 
RROR 

RROW 

RRED 
RRING 
RRET 

Ss 

SSORY 

8S 

ss 

SSED 

SSES 

SSION 
SSADOR 
SSIBLE 
SSAULT 
SSEMBLE 
SSEMBLIES 
SSEMBLY 
SSMENTS 
SSESSMENTS 
SSET 

SSETS 
SSIGNED 
SSIGNMENT 
SSIGNMENTS 
SSIST 
SSISTANCE 
SSISTANT 
SSOCIATE 
SSOCIATION 
SSOONAS 
SSURANCE 
SSURE 

ss 

Ss 

Ss 

SSNESS 
SSIS 


CLA 
COMMI 
COMMI 
COMMI 
COMPA 

COMPLETENE 
COMPRE 
CONCE 
CONFE 
CONGRE 
CONGRE 
CORRECTNE 

CRO 

CRO 

CRO 

DARKNE 
DEPRE 
DISCU 
DISCU 
DISCU 
DISMI 
DISMI 

DI 

DI 
DISTRE 
DISTRE 
DRE 

DRE 
EMBA 
EMBA 
EXCE 
EXCE 
EXPRE 
FORTRE 
GA 
AA(I)A GLA 
AA(I)A HEAVYLO 
ILLNE 
IMPA 
IMPO 
IMPRE 
IMPRE 
IMPRE 


SSIFICATION 
SSARY 
SSION 
SSIONER 
SS 

SS 

SSED 
SSION 
SSION 

SS 
SSIONAL 
ss 

SS 

SSING 
SSROADS 
ss 

SSION 

Ss 

SSED 
SSION 

SS 

SSAL 
SSEMINATED 
SSEMINATION 
ss 

SSED 

Sts} 

SSING 
SSIES 
SSY 

ss 

SSIVE 

ss 

ss 

SSING 
SSES 
SSES 

ss 
SSABLE 
SSIBLE 
SSED 
SSION 
SSIVE 
SSUE 
SSUES 
SSUING 
Ss 

SSON 


PO 

PO 
PREPAREDNE 
PRE 

PRE 

PRE 
PROGRE 
PROGRE 
READINE 
RECONNAI 
REDCRO 
SE 

STRE 
SUBMI 
SUCCE 
SUCCE 
SUCCE 
SUCCE 
TRANSMI 
UNLE 
UNSUCCE 
USELE 

VE 

VE 


ss 


Nts) 

ss 
SSAGE 
SSAGES 
SSENGER 
SSING 
SSILE 
SSING 
SSION 
SSIONS 
SSARY 
SSITATE 
SSITY 

Ss 
SSAGE 
SSED 
SSENGER 
SSES 
SSIVE 
SSPORT 
SSION 
SSION 
SSESSION 
SSIBLE 
Ss 

SS 

SSED 
SSURE 
ss 

SSIVE 

ss 
SSANCE 
Ss 
SSION 
Ss 
SSION 
ss 
SSFUL 
SSFULLY 
SSIVE 
SSION 
SS 
SSFUL 
ss 

SSEL 
SSELS 


Table D-7—Continued 


AA 
AA 
AA(I)A 
AA 
AA(6)A 
AA 
AA 
AA(6)A 
AA(3)A 
AA(3)A 
AA(2)A 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 
AA 


WIRELE 
WITNE 


= 
ia 
Zz, 
r>PrPrPr rrr > & 


peEPUDawenee 
SO >r > rr Pr PrP PY 


BO 
BOYCO 
CIGARE 
COMMI 
COUNTERA 
FI 

GE 

LE 

LE 

LI 

LI 
NAVALA 
NAVALBA 
OMI 

SE 

SPO 
SUBMI 
TA 

THA 
WILLA 
WRI 

MU 

NO 


Ss 

Ss 

SSES 

TTACH 
TTACHMENT 
TTACK 
TTAIN 
TTAINMENT 
TTEMPT 
TTEMPTED 
TTENTION 
TTALION 
TTEN 
TTERED 
TTERIES 
TTERY 

TTLE 
TTLEFIELD 
TTLESHIP 


TTACK 
TTEN 
ZZLE 
ZZLE 
ABANDON 
AGAIN 
AGAINST 
ALARM 
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A(I)A(2)A 
A(I)A 
A(I)A 
A(I)A 
A(IA 
A(I)A 
A(1)A(2)A 
A(1I)A(2)A 
A(QIA 
A(I)A 
A(I)A 
A(1)A 
A(IAC)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(1I)A 
A(IA 
A(1)A 
A(I)A 
A(I)A 
A(I)A 
A(IA 
A(I)A 
A(1I)A 
A(I)A 
A(I)A 
A(I)A 
A(IA 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(DA 
A(IAC)A 
A(I)A 
A(QI)A 
A(I)A 
A(I)A 
A(DA 
A(LI)A(2)A 
A(I)A(DA(Q2)A 
A(LI)A(2)A 
A(I)A(2)A 
A(I)A 
A(I)A 
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ALASKA 
ANAC 
ANALYSIS 
ANALYZE 
ARATUS 
ARANCE 
ARABIA 
AVAILABLE 
AWAIT 
AWARD 
AWAY 
ALAMITY 
ANADA 

ADA 

ANAL 
APABILITY 
APACITY 
ATASTROPHE 
AVALRY 
ARACTER 
ARACTERISTIC 
ARANCE 
ATANT 
ABAND 
AMAGE 
AMAGED 
AMAGING 
ARANCE 
AVATE 
AVATION 
ANATION 
ATAL 
ATALITY 
ALARM 
ARAGE 
ALARM 
ALALARM 
APAN 

ANAGE 
ANAGEMENT 
APALM 

AVAL 
ALATTACK 
AVALATTACK 
AVALBASE 
AVALBATTLE 
AVALFORCES 
ATANT 


A(I)A 
ACACIA 
A(I)A 
A(I)A 
A(IA 
A(L)A(2)A 
A(1I)A(2)A 
A(QI)A 
A(LI)A 
A(I)A 
A(1I)A 
A(I)A 
A(IA 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(IA 
A(I)A 
A(I)A 
A()A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(DA 
A(I)A 
A(I)A 
A()A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(1I)A 
A(I)A 
A(I)A 
A()A 
A(I)A 
A(IA 
A(IA 
A(1I)A 
A(I)A 


WITHDR 
PRO 
PRO 

BI 


MOTOR 
BEENNEE 
BLOCKA 
BOMBAR 
COMMAN 
DECI 


DEFEN 
DEMAN 
ENCO 
EXPAN 
EXPEN 
EXTEN 
GROUN 
GUAR 
INVA 

LAN 
OFFEN 
PROCEE 
RAI 
RECOMMEN 
SUCCEE 
SUSPEN 
UNEXPEN 
WOO 
WOUN 


AMA 
ANAMA 
APA 
ARACHUTE 
ARADE 
ARAGRAPH 
ARALLAX 
ARALLEL 
ARATION 
AMATION 
ARANTINE 
ALARY 
ARATE 
ARATION 
AXATION 
ACANCY 
AWAL 
BABLE 
BABLY 
CYCLE 
CYCLONE 
CYCLE 
DED 

DED 

DED 

DED 

DED 
DEDICATE 
DEDICATION 
DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 

DED 
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| A(I)A DID | A(I)AQ)A EFERRED | 
' : EMENT EPEND 


( (1) D 
A(DA AGRE EMEN A(I)A D 
A(DA ALL EGE A(DA D  EPENDABILITY 
A(DA AMM ETER A(I)A(5)A D  EPENDABLE 
ACA AMUS EMENT A(I)AQ)A D EPENDENT 
A(DA ANNOUNCEMENT A(DA D ESERT 
A(I)A ARRANG EMENT A(DAQ)A DESERTED 
A(DA BAROMETER A(I)A(2)A D ESERTER 
A(DA BATT ERED A(IA DETECTOR 
A(DA BEENNE EDED A(I)A DETENTION 
A(I)A BELLIG ERENT A(I)A(6)A DETERIORATE 
ADA BES EGED A(DA D ETERMINATION 
A(DA BILL ETED A(DA()A DETERMINE 
ACA BRE EZE A(DA(QA D  ETERMINED 
A(DA BRIDG EHEAD A(DA D EVELOP 
A(DA CARELESS A(DAQR)A DEVELOPED 
AGAIA CAR ELESSNESS A(DA(4)A D EVELOPMENT 
A(DA CEM ETERY A(1)A(2)A DIFF ERENCE 
A(DAC)A C EMETERY A(IA DIFF ERENT 
A(I)A CENT ERED A(DA DISPLACEMENT 
A(DA CHE ESE A(DA DYNAMOM- ETER 
A(I)A COLL EGE A(DA ELECTRICITY 
A(DA COMMENCEMENT A(DA EL EMENT 
A(DA COMPL ETE A(DA(DA ELEMENT 
ACA COMPL ETELY AUDA EL EMENTARY 
ACA COMPLET ENESS A(DA(A ELEMENTARY 
AQ)AQ)A COMPLETENESS AQ)A(QB)A ELEVATE 
A(I)A CONCR ETE A(DA ELEVATION 
A(DAQ)A CONF ERENCE ACA EL EVEN 
A(IA CONFINEMENT A(IA(I)A ELEVEN 
A(DA CONQUERED A(DA ELSEWH ERE 
A(DA COV ERED A(DAQA EMERGENCY 
ACA CR EDENTIAL A(DA EMPLAC EMENT 
A(DA(Q)A D ECEMBER A(I)A ENCIPH ERED 
A(IA(7)A D  ECENTRALIZE A(DA ENCOUNT ERED 
A(A(1)A D ECENTRALIZED A(DAQ)A ENEMIES 
ACA DECIPH ERED A(I)A ENEMY 
A(I)A DEFEAT A(I)A(6)A ENEMYPLANES 
A(IA(2)A D EFEATED A(DA ENEMYTANKS 
A(DA DEFECT A(DA ENFORC EMENT 
A(L)A D  EFECTOR A(IA ENGAG EMENT 
A(IA(4A DEFECTIVE ACA ENTANGL EMENT 
ADA D EFEND A(DA EVERY 
A(DAQ)VA D EFENDED A(DA EXCIT EMENT 
A(DA(Q)A D EFENDER A(DA(S)A EXECUTIVE 
A(DAQ)A D  EFENSE A(DA(4)A EXERCISE 
A(DA(DA DEFENSIVE A(DA EXTR EME 
A(DA D EFER A(DA EYE 


D-55 


D-56 


A(DA 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)AA 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(A 
A(L)A(2)A 
A(I)A 
A(LDA(Q)A 
A(1)A(6)A 
A(I)A 
A(I)A 
A(I)A 
A(IA(Q)A 
A(1)A 
A(I)A 
A(1I)A 
A(I)A 
A(IA 
A(I)A 
A(I)A 
A(1)A 
A(1)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(1)A(6)A 
A(I)A 
A(I)AA 
AQAA 
A(I)A 
A(IA 
A(I)A 
A(I)A(4)A 
A(DA 
A(I)A 
A()A 
A(IA(DA 
A(I)A(2)A 


HIND 
HYDROM 
HYGROM 

IC 
IMPROV 
INCOMP 
INCOMP 

IND 

IND 

INT 

INT 
INTERF 
INTERF 
INTERPR 
INTERV 
KE 
KILOM 
LETT 

L 
MANAG 
MEASUR 
MEASUR 
M 

M 
MILLIM 
MOV 


OBSOL 
ORD 


PARENTH 
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EDERAL 
ENERAL 


ENERALALARM 


ENERALSTAFF 
ETER 

ETER 
EBEEN 
ERE 

ERED 

ETER 

ETER 
EBERG 
EMENT 
ETENCE 
ETENT 
EPENDENT 
ETERMINATE 
EREST 
ERESTING 
ERE 
ERENCE 
ETER 

ENE 

EPER 

ETER 
ERED 

EVEL 
EMENT 
EMENT 
EMENTS 


ETEOROLOGICAL 


ETER 

ETER 
EMENT 
ECESSARY 
ECESSITATE 
ECESSITY 
ETEEN 
ETEENTH 
ETE 

ERED 

ESES 
ENETRATE 
ENETRATION 
EMENT 
EDE 

ECEDE 
EDENCE 


A(1I)A(I)A(2)A 
A(I)A 
A(A 
A(1)A(2)A 
A(I)A(IA(Q2)A 
A(I)A(Q)A 
A(I)A 
A(I)A 
A(I)A(2)A 
A(QDA 
A(I)A 
A(IA 
A(I)A 
A(I)A 
A(1I)A(2)A 
A(I)A(2)A 
A(IA 
A(I)A(S)A 
A(I)A 
A(A 
A(1)A(2)A 
AQ) ACI A(2)A 
A(I)A 
A(I)A 
A(I)A 
A(LI)A 
A(1)A(2)A 
A(I)A 
A(I)A(2)A 
A(IA 
A(IA(QQ)A 
A(I)A 
A(I)A(2)A 
A(1)A(2)A 
A(1)A(2)A 
A(IA 
A(I)A(Q)A 
A(I)A 
A(I)A 
A(I)A 
AQI)A(6)A 
A(IA 
A(I)A 
A(DA 
A(1)A(2)A 
A(A 
AQI)A(2)A 
A(I)A(2)A 


PR 
PR 
PR 


PR 

PR 

PR 

PR 

PR 

PROCE 
PSYCHROM 


REENFORC 
R 

REF 

R 
REIMBURS 
REINFORC 
REINSTAT 


ECEDENCE 
ECEDING 
EFER 
ERENCE 
EFERENCE 
EFERRED 
ESENT 
ESERVATION 
ESERVE 
EDED 

ETER 

EBEC 
EBELLION 
ECEIPT 
ECEIVE 
ECEIVER 
ECEIVING 
ECEPTACLE 
EMENT 
EFER 
ERENCE 
EFERENCE 
EMENT 
EMENT 
EMENT 
EJECT 
EJECTED 
EJECTOR 
ELEASE 
EVE 
EMEDIES 
EMEDY 
EMEMBER 
EPEATED 
EPEATER 
EPEL 
EPELLED 
EMENT 
ESENT 
ESENTATION 
ESENTATIVE 
EMENT 
ESEARCH 
ESERVATION 
ESERVE 
ETENTION 
EVENUE 
EVERSE 
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A(I)A EWED A(DA ISING 
A(I)A EME A(I)A ITION 
A(DA EVEL A(I)A IAIRCRAFT 
A(I)A ELECT A(I)A ICIPATE 
A(I)A(2)A ELECTED A(I)A(3)A ICIPATION 
A(I)A EVEN AQ)A ICIAL 
A(I)A(2)AA EVENTEEN ACACIA IFICIAL 
A(I)A(2)AA EVENTEENTH A(A ILITY 
A(I)A EVENTH A(L)A()A IBILITY 
A(DA EVENTY A(I)A ILITY 
A(1I)A(6)A EVENTYFIVE A(I)A IFICATE 
A(DA EVERAL A(I)A ILIAN 
A(I)A ERE A()A()A IVILIAN 
A(LA(DA EVERE A(1I)A(3)A CLASS IFICATION 
A(IA EGE A()A COALITION 
A(I)A SPH ERE A(I)A COEFF ICIENT 
A(I)A STAT EMENT A(DA COLL ISION 
A()A SUCCE EDED A()A COLL ISIONS 
A(IA SUFF ERED A(I)A COMPETITION 
A(DA SURREND ERED A(I)A COMPOSITION 
ADA T ELEGRAM A(I)A(2)A CONCILIATION 
A(IA(A)A T ELEPHONE A(I)A COND ITION 
A(IA TH ERE A(I)A CR ISIS 
A(DA(3)A TH EREFORE A(I)A CRITIC 

A(I)A THERMOMETER A(I)A CRITICAL 
A(I)A TH ESE A(1)A ICISE 
A(DA THREAT ENED A(I)A(IA CR ITICISE 
A(I)A US ELESS A(I)A ICISM 
A(DA V  ETERINARIAN A(I)AQ)A CRITICISM 
AQ)A ERE A()A CRITIQUE 
A(DA ERE A()A DEC  ISION 
ACA ELESS A(I)A DEF ICIENCY 
A(DA FIFTEEN A(I)A DEF  ICIENT 
ACA FIFTEENTH A(I)A DEF _INITE 
AQ)A FIFTH A(1)A DEFINITION 
AQ)A FIFTY A(I)A(L)A DEF  INITION 
A(I)A GAGE A(1)A(3)A DEMOB _ ILIZATION 
A(I)A GAGE ACA DEMOB _ILIZE 
A(I)A GAGEMENT A(DA DEPENDAB _ILITY 
A(I)A(2)A GAGING A(IA DETRA  INING 
A(DA HTH A(QI)A DIET ITIAN 
A(L)A HTHE A(QI)A INISH 
A(I)A ITIES A(I)A(IA IMINISH 
A(I)A(I)A IVITIES A(I)A IGIBLE 
A(DA IVITY A(DA(DA IRIGIBLE 
A(I)A ITIONAL A(I)A ISINFECT 
A(I)A(S)A INISTRATION A(I)A ISINFECTED 
A(LA(5)A INISTRATIVE A(DA DISPOS ITION 
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A(I)A 
ACA 
A(DAQ)A 
A(I)A 
AQAA 
ACA 
A(I)A 
A(IA 
A(I)A 
A()A 
A(L)A 
A(1I)A 
AQ(AQ)A 
A(L)A 
A(I)A 
A(IA 
AQAA 
A(I)A 
A(DA 
A(I)A 
A()A 
A(Q)A 
A(IAC(MA 
A(I)A 
A(I)A(3)A 
A(DA 
A(I)A 
A(DA 
A(IA 
A(I)A 
A(DA(Q)A 
A(A 
A(IAC)A 
A(I)A 
A(I)A 
A(DA 
A(I)A 
A(I)A(3)A 
A(DA 
A(IAQ)A 
A()A 
A(1I)A 
AQ)A 
A(I)A 
A()A 
A(L)AC)A 
A(A 
A(I)A 


ELECTR 
EL 
ENTERPR 
EXH 
EXHIB 
EXH 
EXPED 
EXPED 
FACIL 
FAC 

F 

F 

F 

FORT 
HOSTIL 
HOST 
HOST 
IDENT 
IGN 
INCL 
IND 
INEFF 
IN 


IN 


IRREGULAR 
LIAB 


IVIDE 
IDING 
IVIDING 
ISION 
IVISION 
ICIENCY 
ICIENT 
ICITY 
IGIBLE 
ISING 
IBITED 
ITION 
IBITION 
ITING 
ITION 
ITIES 
ILITIES 
ILING 
INISH 
IRING 
IFIED 
ITIES 
ILITIES 
ILITY 
IFICATION 
ITION 
INING 
IVIDUAL 
ICIENCY 
ITIAL 
INITIAL 
ITIATE 
INITIATE 
ITIES 
ILITY 
IAISON 
IMIT 
IMITATION 
ITING 
IMITING 
INING 
ITIME 
ICINE 
ILITARY 
ITIA 
ILITIA 
INIMUM 
INING 
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A(I)A(3)A 
A(QDA 
A(DA 
AIA 
AQI)A 
A(I)A 
AQIA 
A(QDA 
A(IA 
A(1I)A(2)A 
A(I)A 
A()A 
ACA 
AQUA 
AQ)A 
AQ)A 
A(I)A(3)A 
A(I)A 
A(I)A 
A(I)A 
A(1)A 
A(I)A 
A(1I)A(3)A 
A(DA 
A(I)A 
A(DA 
A(I)A 
A(I)A 
A(I)A 
A(1)A 
A(I)A 
A(IJA()A 
A(I)A 
A(IAC)A 
AQUA 
A(DA 
A(I)A 
A(I)A 
A(DA(DA 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A(3)A 
AQI)A 
A(IAQ)A 
A(I)A 
A(QI)A 


MOB 
MOB 
MUN 
OBTA 
OFF 
oP 
OPPOS 
PAC 
PART 
PH 
POL 
POL 
POS 
POS 
POS 
PRA 
PREL 
PREL 
PROH 
PROV 
PROV 
PROX 
QUAL 
RA 

RA 
RECE 
RECOGN 
RECRU 
REMA 
REQU 
REQUIS 
REQU 
RESPONSIB 
RESPONS 


SPEC 
SPEC 
SUFF 
SUITAB 


ILIZATION 
ILIZE 
ITIONS 
INING 
ICIAL 
INION 
ITION 

IFIC 

ITION 
ILIPPINES 
ITICAL 
ITICS 
ITION 
ITIONS 
ITIVE 

IRIE 
IMINARIES 
IMINARY 
IBIT 

ISION 
ISIONS 
IMITY 
IFICATION 
IDING 
INING 
IVING 
ITION 
ITING 
INING 
IRING 
ITION 
ISITION 
ILITY 
IBILITY 
TRING 
IDING 
IGID 

IGID 
IRIGID 
ICING 
IFICANCE 
IFICANT 
IMILAR 
IMILARITY 
IFIC 
IFICATION 
ICIENT 
ILITY 


A(I)A SUSP 
A(I)A SUSP 
A(1I)A SUSP 
A(1)A TERR 
A(I)A TRAD 
A(1)A TRA 
A(1I)A TRANSPAC 
A(I)A UNIDENT 
A(IA 

A(DACM)A 

A(I)A(3)A 

A(DA 

AQMDA(DA 

A(I)A 

A(IA(Q)A 

A(DAM(DA(DA 

A(IA 

A(I)A 

A(I)A 

A(I)A 

ACA 

A(DA 

A(I)A 

A(I)A 

A(I)A 

A(1I)A 

A(DA 

A(IA 

A(1)A(6)A 

A(DA 

A(DA MINI 
A(I)A RE 
A(1I)A THER 
A(I)A A 
A(I)A BEGIN 
A(I)A CONCER 
A(IA CONTI 
A(IA DETRAI 
A(I)A DOMI 
A(IA DOMI 
A(I)A INCLI 
A(DA INTERVE 
A(DA LIEUTE 
A(I)A LI 
A(IA MAINTE 
ACA MAN 
A(QDA MI 
A(I)A MOR 
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ICION 
ICIONS 
ICIOUS 
IFIC 
ITIONAL 
INING 

IFIC 

IFIED 
ILITY 
ILIZE 
IFICATION 
INITY 
ICINITY 
ILITY 
IBILITY 
ISIBILITY 
ISIBLE 
ISIT 
ISITOR 
ISITS 
IRING 
LALARM 
LEL 
MAMENT 
MOMETER 
MUM 
MEMBER 
MEMORANDA 
MEMORANDUM 
MEMORIAL 
MUM 
MEMBER 
MOMETER 
NONYMOUS 
NING 
NING 
NENTAL 
NING 
NANCE 
NANT 
NING 
NING 
NANT 
NING 
NANCE 
NING 
NING 
NING 


A(DA 
A(DA(4)A 
A(DA(A)A 
A(DA 
A(DA 
A(DA(7)A 
AQMDA 
A(DA 
A(DA 
ADA 
A(DA 
A(DA 
ADA 
ADA 
ADA 
AQDA 
A(DAQ)A 
A()A 
A(DA 
A(DA(A 
A(DA 
A(DA 
AQDA 
ADA 
AQMDA 
A(DA 
AQAA 
A(DA 
A(DA 
AQAA 
ADA 
AQAA 
AMA 
A(DA 
ADA 
ADA 
AWA 
A(1)A(Q)A 
A()A(3)A 
A(DA 
A(DA 
ADA 
AMADA 
A(DA 
ADA 
ADA 
A(DAQ)A 
A(DA 


METEOR 
METE 
MON 


NINE 
NINETEEN 
NINETEENTH 
NINETY 
NINTH 
NONCOMBATANT 
NING 

NANCE 
NENT 

NING 

NING 

NING 

NING 

NING 

NING 

NING 
NKNOWN 
OMOBILE 
OLOGICAL 
ONOLOGICAL 
OLON 
OLONEL 
OLORS 
ONOMIC 
ONOR 
OMOTIVE 
OCOMOTIVE 
OKOUT 
OLOGICAL 
OROLOGICAL 
OPOLY 
ONOPOLY 
OTOR 
OTORCYCLE 
OTORIZED 
OTOGRAPHY 
OMOTE 
OMOTION 
OPORTION 
OPOSALS 
OPOSE 

OCOL 
OTOCOL 
OVOST 
OROUS 

OLON 
OMORROW 
OPOGRAPHIC 
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A(I)A 
A(I)A 
AQ)A 
A(I)AA 
A(I)AA(4)A 
A(Q)A 
AQ)A 
A(DA 
AQI)A 
A(IA 
A(QI)A 
A(IA 
A(I)A 
A(IA 
AQ)A 
A(I)A 
A(I)A 
AQI)A 
A(I)A 
A(I)A 
A(I)A 
A(DA 
A(I)A 
A(I)AA 
A(DA 


VIG 
NEWS 
NEWS 


Al 
ANTIAI 
ARBIT 
CA 

D 

ENTE 
ENTE 
ER 
FINGE 
FO 
INTE 
INTE 
LIB 

MIR 
NEA 

SU 

TER 
ADDRES 
ANALY 
AS 

AS 

AS 

AS 

AS 

CA 
CHAS 
CRI 
CLAS 
DEFEN 
DI 
EXERCI 
EXPEN 
HEAVYLOS 
LOS 
OUTPO 
PARENTHE 
PARENTHE 
PAS 
PER 
POS 
PROTE 
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OROUS 
PAPER 
PAPERS 
PAPA 

PIPE 
POPULATED 
POPULATION 
RCRAFT 
RCRAFT 
RARY 
RTRIDGE 
RYRUN 
RPRISE 
RPRISING 
ROR 
RPRINT 
RTRESS 
RPRETATION 
RPRETER 
RARY 

ROR 

RER 
RPRISE 
ROR 

SES 

SIS 
SESSMENT 
SESSMENTS 
SIST 
SISTANCE 
SISTANT 
SES 

SIS 

SIS 

SES 

SES 
SASTER 
SES 

SES 

SES 

SES 

STS 

SES 

SIS 

SES 
SISTENT 
SESSION 
STS 


AQ)A 
A()A 
A(I)A 
AQ)AA 
A(DA 
A(I)A 
A(IA 
AQ)A 
AQ)A(3)A 
A(I)A(3)A 
A(DA 
A(L)A(6)A 
A(L)A(6)A 
AQ)A 
A(L)A 
ACMA 
A(I)A 
AQ)A 
A(DA 
A(DA 
A(IA 
A(DA(IA 
A(I)A 
AQ)A(I)A 
A(1)A 
A(IA(I)A 
A(DA 
A(I)ACI)A 
A(1)A 
A(I)A 
A(I)A 
A(I)A 
A(I)ACI)A 
A(Q)A 
AQ)A 
A(I)A 
AQ)A 
A(Q1)A 
A(I)A 
A(I)A 
AQ)A 
A(DA(4)A 
AQ)A 
A(I)A 
A(JA 
A(IA(A)A 
A(DA 
AQ)A 


PURPO 
RE 
RE 


SUB 


WITNES 
AL 

AN 

CI 
COMPE 
COMPU 
CONSTI 
CONS 
CONSTI 
CONS 
CONSTI 
CONS 
DESTI 
DES 

DIC 

DIC 

DIE 
INSTI 
INS 
INTERPRE 
INVI 

LA 

LIMI 
NECESSI 
PAR 
RADIOS 
REINS 
REINS 
REPRESEN 
REPRESEN 
SANI 

s 

S 

Ss 


SES 

SIST 
SISTANCE 
SESSION 
SISTENCE 
SUSPECTED 
SUSPEND 
SUSPENDED 
SUSPENSE 
SUSPENSION 
SUSPICION 
SUSPICIONS 
SUSPICIOUS 
SYSTEM 
SES 

TITUDE 
TITANK 
TATION 
TITION 
TATION 
TUTE 
TITUTE 
TUTING 
TITUTING 
TUTION 
TITUTION 
TUTE 
TITUTE 
TATED 
TATOR 
TITIAN 
TUTION 
TITUTION 
TATION 
TATION 
TITUDE 
TATION 
TATE 
TITION 
TATION 
TATE 
TATEMENT 
TATIONS 
TATIVE 
TATION 
TATEMENT 
TATES 
TATION 


A(DA 
A(IA(Q)A 
A(I)A 
A(I)A 
AQ)AQ)A 
A(I)A 
A(DA()A 
A(L)AA 
A(I)A 
A(A 
A(I)A 
AQI)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A(I)A 
A()A 
A()A 


A(2)A 
A(2)A(2)A 
A(2)A 
A(Q2)A 
A(2)A 
A(2)A(I)A 
A(2)A 
A(2)A 
A(2)A(2)A 
AQ)A()A 


s 

Ss 

S 
SUBSTI 
SUBS 
SUBSTI 
SUBS 


TEN 


TRANSPOR 
UNITEDS 
WI 

A 

CONTIN 


SUR 


ADV 


ADV 


AL 


AMB 


AR 
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TATIONS 
TATISTICS 
TATUS 

TUTE 
TITUTE 
TUTION 
TITUTION 
TATTOO 
TATIVE 
TITLE 
TOTAL 
TOTALING 
TATION 
TATES 
THTHE 
UGUST 

UOUS 
UTURE 
UGURATION 
USUAL 
UNUSUAL 
USUAL 

ULU 

VIVED 
WKWARD 
ADJACENT 
ADVANCE 
ADVANCED 
ADVANCING 
ANTAGE 
ADVANTAGE 
ANTAGEOUS 
ADVANTAGEOUS 
AFFAIR 
ASKA 

ALFA 
ALMANAC 
ALWAYS 
ASSADOR 
AMBASSADOR 
APPARATUS 
APPARENT 
APPARENTLY 
ABIA 

AREA 
ARMAMENT 
ARRANGE 
ARRANGEMENT 
ASIA 


A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 


AV 


aaQgaaganganaanwnwn 


Q 
ee 


co 

COMM 
COUNTER 
DEB 

DI 

EMB 

EV 

EV 


ASIATIC 
ASSAULT 
ATLANTIC 
ATTACH 
ATTACHMENT 
ATTACK 
ATTAIN 
ATTAINMENT 
AILABLE 
AVIATION 
AVIATOR 
AGGAGE 
ARRACKS 
ARRAGE 
ATTALION 
AMPAIGN 
ANVAS 
APTAIN 
ASUAL 
ASUALTIES 
ASUALTY 
APLAIN 
ASTAL 
ANDANT 
ATTACK 
ARKATION 
AGRAM 
ARKATION 
ACUATE 
ACUATING 
ACUATION 
ALUATION 
ADUAL 
AMMABLE 
ALLATIONS 
ANTANEOUS 
ANUARY 
ANDATE 
ANDATED 
ANUAL 
ANDA 
ATTACK 
ALBASE 
ALBATTLE 
ACKAGE 
AGRAPH 
ALLAX 
ASSAGE 
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A(2)A PRE ARRANGED A(2)A CONCLUDE 
A(2)A RADIAL A(2)A CONCLUSION 
A(2)A R ADIATE A(2)A CONCRETE 
A(2)A RADIATION A(2)A EN CIRCLE 
A(2)A RET ALIATION A(2)A EN CIRCLING 
A(2)A SE APLANES A(2)A IMPRA CTICABLE 
A(2)A ST ANDARD A(2)A PRA CTICAL 
A(2)A ST ANDARDS A(2)A SE CRECY 
A(2)A TH ATHAVE A(2)A SIGNIFI CANCE 
A(2)A TRANS ATLANTIC A(2)A TA CTICAL 
A(2)A(2)A TR ANSATLANTIC A(2)A TA CTICS 
A(2)A VARIATION A(2)A VA CANCY 
A(2)A VETERIN ARIAN A(2)A HUN DRED 
A(2)A W ARFARE A(2)A IN DEED 
A(2)A WILL ATTACK A(2)A ONEHUN DRED 
A(2)A ATOMIC BOMB A(2)A STAN DARD 
A(2)A BARBED A(2)A STAN DARDS 
A(2)A BOMB A(2)A ABS ENCE 
A(2)A BOMBARD A(2)A ADDR ESSED 
A(2A BOMBARDED A(2)A ADDRESSES 
A(2)A BOMBARDMENT A(2)A AGR EEMENT 
A(2)A BOMBER A(2)A APP EARED 
A(2)A BRIBE A(2)A ARR ESTED 
A(2)A BRIBERY A(2)A BATT  ERIES 
A(2)A BULB A(2)A BATTL EFIELD 
A(2)A HEAVY BOMBER A(2)A BEENN EEDED 
A(2)A LIGHT BOMBER A(2)AA(1)A BE ENNEEDED 
A(2)A MEDIUM BOMBER A(2)A BE ETLE 

A(2)A CANCEL A(2)A(I)A B ESIEGED 
A(2)A CANCELLATION A(2)A BETTER 
A(2)A CANCELLED A(2)AA B ETWEEN 
A(2)A CHECK A(2)A BR EEZE 
A(2)A CIRCLE A(2)A CANC ELLED 
A(2)A CIRCUIT A(2)A C EASE 

A(Z)A CIRCUITOUS A(2)A C ENTER 
A(2)A CIRCULAR A(2)A(I)A C ENTERED 
A(2)A CIRCULATE A(2)A C ENTERING 
A(2)A CIRCULATION A(2)A CHALL ENGE 
A(2)A(6)A CIRCUMSTANCES A(2)A CH EESE 

A(2)A CIRCUMSTANTIAL A(2)A CIGAR ETTE 

A(2)A CONCEAL A(2)A COINCID ENCE 
A(2)A CONCEALMENT A(2)A COMM ENCE 
A(2)A CONCENTRATE A(2)A()A COMM ENCEMENT 
A(2)A CONCENTRATING A(2)A COMMERCE 
A(2)A CONCENTRATION A(2)A COMP ELLED 
A(2)A CONCERNING A(2)A COMPR ESSED 
A(2)A CONCESSION A(2)A COND EMNED 
A(2)A CONCILIATION | A(2)A COND ENSED 
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A(2)A CONFER ENCE A(2)A ENTER 

A(2)A CONF ERRED A(2)A ENTERING 
A(2)A CONFID ENCE A(2)A(5)A ENTERPRISE 
A(QQ)A CONVAL ESCENT A(2)A ENTERPRISING 
A(2)A CONV ENIENT A(2)A(6)A ENTERTAINMENT 
A(2)A CORR ECTED A(Q)A ENVELOP 
A(2)A CORRESPOND ENCE A(2)A(3)A ENVELOPE 
A(2)A DEC EMBER A(2)A ETHER 

A(2)A DECIPH ERMENT A(2)A EXCEPT 

A(Q2)A DECR EASE A(2)A EXCESS 
AQ)A(QQ)A D  ECREASE A(2)A(4A EXCESSIVE 
A(2)A DECR EASED A(2)A EXPECT 
A(QQ)A(Q2)A ECREASED A(2)A(3)A EXPEDITE 
A(2)AA ECREE A(2)A EXPEDITING 
A(2)A EATED A(2)A EXPEDITION 
AQ)A ENDED A(Q2)A ELLED 

AQ)A ENDER A(2)A(2)A EXPELLED 
A(2)A ENSE A(2)A EXPEND 
A(2)A ENSES A(2)A ENDED 

AQQ)A ERRED A(2)A(2)A EXPENDED 
A(2)AA EGREE A(2)A ENSES 

AQ2)A ENDENT A(2)A(2)A EXPENSES 
A(Q)A EPRESSION A(2)A(4)A EXPENSIVE 
A(2)A ERTED A(2)A ENCE 

A(2)A ERTER A(2)A(2)A ERIENCE 
A(2)A DIFFER ENCE A(2)A(2)A(2)A EXPERIENCE 
A(Q)A DISAPP EARED A(2)A(3)A EXPERIMENT 
A(2)A DIS EASE A(2)A EXTEND 
A(2)A DISINF ECTED A(2)A ENDED 

A(2)A DISP ERSE A(2)A(2)A EXTENDED 
A(2)A DISP ERSED A(2)A EXTENDING 
A(2)A DISTR ESSED A(2)A EXTENSION 
A(2)A EAGER A(2)A(DA EXTENSIVE 
A(2)A ECHELON A(2)A EXTENT 
A(2)A(3)A ECHELONED A(2)A EXTERIOR 
A(Q)A(A)A ECHELONMENT A(2Q)A(6)A EXTERMINATE 
A(2)A EDGE A(2)A EXTERMINATION 
A(2)A EFFECT A(2)A ERCE 

A(2)A ECTED A(2)A EASE 
A(2)A(2)A EFFECTED A(2)A EBEEN 
A(2)A(A)A EFFECTIVE A(2)A ELPER 
AQQA(A EWHERE A(2)A IMPR ESSED 
A(2)A(2)ACI)A ELSEWHERE A(2)A INCID ENCE 

A(2)A EM ERGENCY A(2)A INCOMPET ENCE 

A(2)A ENCIPH ERMENT A(2)A INCR EASED 

A(2)A EN  EMIES A(2)A INDEP ENDENT 
A(2)A ENT ENTE A(2)A INF ECTED 
A(2)A(2)A ENTENTE A(2)A INFLU) ENCE 
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| AQ 


A(2)A(L)A(Q)A 
A(QQ)A 
A(2)A(4)A 
A(2)A 
A(2) ACA 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A(I)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A(Q)A 


AIDA 


AQQ)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 


| A(2)A PROT ECTED | A(2)A SOUTHWESTERN | 


INT 
INTERC 


TAIT 
dIN1I 


INT 


INTERFER 


INT 
INT 
INT 
INT 


NEGLIG 
NIN 

NIN 
NORTHW 
NOV 

OBS 

OBS 

OFF 

OFF 
OVERWH 
PASS 
PRECED 
PREFER 
PREF 
PREPAR 
PRES 

PR 

PROC 
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ERCEPT 
EPTED 


PNOnRpDTRnNH 
BANE ib 


ERFERE 
ENCE 
ERFERENCE 
ERFERING 
ERMEDIATE 
ERMENT 
ERVENE 
ERVENING 
ERVENTION 
ENTED 
EEPER 
EADER 
EAVE 
ETTER 
ETTERED 
ENSE 
EUTENANT 
EUVER 
ERIEL 
EAGER 
EMBER 
ENGER 


ESSENGER 
EARER 


Piva 


EAREST 
ENCE 
ETEEN 
ETEENTH 
ESTERN 
EMBER 
ERVE 
ERVER 
ENDED 
ENSE 
ELMED 
ENGER 
ENCE 
ENCE 
ERRED 
EDNESS 
ERVE 
ESSED 
EEDED 


A(2)A 
AQAA 
A(QQA 
A(2)A 
A(QA 
A(2)A 
A(Q)A 
A(2)A(1)A 
AQAA 
A(2)A(1) A(6)A 
A(2)A 
A(Q)A 
A(2)A(2)A 
A(2)A 
A(Q)A 
A(Q)A 
A(2)A 
A(2)A 
A(Q)A 
A(2)A 
A(Q)A 
A(Q)A 
A(2Q)A()A 
A(2)A 
A(QA(I)A 
A(2)A 
A(Q)A 
A(2)A 
A(2)A 
AQ)A 
A(QA 
A(Q)A(2)A 
A(2)A 
A(Q)A(DA 
AQ)A 
A(2)AA 
A(2)AA 
A(2)A 


REC 


pun 


REV 
REV 


SH 


EIVE 
EIVER 


BAIDETN 
DBINVoL 


ECREATION 
ECREATIONAL 
ENCE 

ECTED 

EASE 

ELIEF 
ELIEVE 

EDIES 
EMBER 
EATED 
EATER 
ELLED 
EPRESENT 
EPRESENTATION 
EPRESENTATIVE 
EQUEST 
ESTED 
EQUESTED 
ERVE 

ERVES 
ESPECT 
ESPECTFULLY 
ESPECTS 
ETREAT 
ENUE 

ERSE 

EVIEW 
EVIEWED 
EVIEWING 
EALEVEL 
EAMEN 
ECRECY 
ECRETARY 
EIZE 

ECTED 

ENCE 
ENTENCE 
EMBER 
EPTEMBER 
ERGEANT 
ENTEEN 
ENTEENTH 
ELLED 


SUBSIST 
SUCC 
SURR 
SURR 
SUSP 
SUSP 
SUSP 
A(2)A(5)A T 
AQAA THR 
A(2)A TRANSF 
A(2)A TRANSV 
A(2)A TRAV 
A(2)A TW 
A(2)A UNEXP 
A(2)A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 


A(2)A 
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ENCE 
EEDED 
ENDER 
ENDERED 
ECTED 
ENDED 
ENSE 
EMPERATURE 
EATENED 
ERRED 
ERSE 

ERSE 

ELVE 
ENDED 
EXPENDED 
ESSEL 
ESSELS 
EDNESDAY 
ESTERLY 
ESTERN 
ETHER 
ESSES 
ECKED 
ESTERDAY 
GGAGE 
GING 

GING 

GING 
GAUGE 
GEOGRAPHIC 
GEOGRAPHICAL 
GUAGE 
GLIGENCE 
GLIGENT 
GZAG 

HIGH 
HIGHER 
HIGHEST 
HATHAVE 
HETHER 
HICH 
ISSION 
IRFIELD 
IATIC 
IATION 
IATION 
ISTIC 
ISTICS 


A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2ACQA 
A(2)A 
A(2)A(4)A 
A(2)A 
A(2)A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A(3)A 
A(2)A(3)A 
A(2)A(3)A 
A(2)A 
A(2)A(3)A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A()A 
A(2)A 
A(2)A(4)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A(3)A 
A(2)A(3)A 
A(2)A 
A(2ACIA 
A(2)A 
A(2)A 
A(2)A(2)A 
A(2)A 
A(2Q)A(Q)A 
A(2)A(3)A 


CHARACTER 
co 

COMM 
COMM 
CONSCR 
COUNCIL 
DESCR 


DISTINGU 


INNING 
INDING 
ILDING 
ISTIC 
INCIDENCE 
ISSION 
ISSIONER 
IPTION 
IATION 
IPTION 
IPTIVE 
IETITIAN 
IFFICULT 
IFFICULTIES 
IPLINE 
ISCIPLINE 
ISMISS 
ISMISSAL 
ISTILL 
ISTINCTION 
ISTINGUISH 
ISTINGUISHED 
ISHING 
ISTINGUISHING 
IFTING 
ISTING 
ILLING 
INDING 
ISHING 
ITTING 
IGNITION 
ILLITERATE 
IMMIGRATION 
INCIDENCE 
INCIDENT 
INDIA 
INDICATE 
INDICATED 
INDICATING 
INDICATION 
INDIRECT 
INDIVIDUAL 
ICTING 
IGNIA 
INSIGNIA 
ICTION 
INVITATION 
IRRIGATION 
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A(2)A KILLING pe A(2 AN NOUNCE 
A(QQ)A(I)A LIABILITY A( a 4)A AN NOUNCEMENT 
A(2)A LIFTING A(2)AA A NTENNA 
A(2)A LIQUID A(2)A ASSIGNMENT 
A(2)A LOG _ISTICS A(2)A ASSIG NMENTS 
A(2)A M_ = IDNIGHT A(2)A ATTAI NMENT 
A(Q2)A M _ILLIMETER A(2)A BEGI NNING 

A(2)A M _ISFIRE A(2)A BI NDING 

A(2)A M _ISFIRES A(2)A COMMA NDANT 

A(2)A M _ISSILE A(2)A COMMA NDING 

A(2A M __ ISSING A(2)A CO NCENTRATE 
A(2)A MISSION A(2)A(S)A CO NCENTRATING 
A(2)A M __ISSIONS A(2)A(6)A CO NCENTRATION 
A(2)A PATR IOTIC A(2)A CO NDENSED 
A(2)A PERM _ ISSION A(2)A CO NFINE 

A(2)A PHIL IPPINES A(2)A(3)A CO NFINEMENT 
A(2)A PRINCIPAL A(2)A(I)A COQ NTINENTAL 
A(2)A PRINCIPLE A(2)A CONTI NGENT 

A(2)A PRINTING A(2)A(2)A CO NTINGENT 
A(2)A PRIORITY A(2)A CO NTINUAL 
A(2)A RAD IATION A(2)A(5)A CO NTINUATION 
ACA REF  ILLING A(Q)A CO NTINUE 
A(2)A RESTR ICTION A(2)A CO NTINUOUS 
A(2)A RETAL IATION A(2)A CONVE NIENT 

A(2)A REVIEWING A(2)A(2)A CO NVENIENT 
A(2)A SH IPPING A(2)A CORRESPO NDENCE 
A(2)A(1)A SIGNIFICANCE A(2)A CORRESPO NDING 
A(2)A(DA SIGNIFICANT A(2)A DEPE NDENT 

A(2)A SIGNIFY A(2)A DISCONTI NUANCE 
A(2)A SINKING A(2)A(2)A DISCO NTINUANCE 
A(2)A SK  IRMISH A(2)A DISCO NTINUE 
A(2)A STAT  ISTICS A(2)A ECHELO NMENT 


ISSION A(2)A NGINE 
SUPER IORITY A(2)A NGINEER 
SW IMMING A(2)A(4)A NGINEERING 
TRANSM _ ISSION A(2)A(S)A NTANGLEMENT 
VAR  IATION A(2)A NTENTE 
ICTIM A(2)A ENTERTAI NMENT 
ITHIN A(2)A EXTE NDING 
LABLE A(2)A NDING 
LOIL A(2)A NKING 


MITMENT A(2)A NMENT 
A(2)A NCENDIARY 
MEDIU MBOMBER A(Q)A NCENTIVE 
ABA NDON A(2)A NDENT 
ADVA NCING A(2)A NFANTRY 
AFTER NOON A(2)A NLAND 


( 

LLEL A(2)A NOON 
( 
( 


MAIM 
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A(2)A NTANEOUS A(2)A ONCOMBATANT 
A(2)A NTEND A(2)A OBSOLETE 
A(2)A NTENSIVE A(2)A OCTOBER 
A(2)A NTENT A(2)A OPPOSE 
A(Q)A(3)A NTENTION A(2)A OPPOSITE 
A(2)A NMENT A(2)A(4)A OPPOSITION 
A(2)A NVENT A(2)A OISON 

A(2)A NVENTED A(2)AA ONTOON 
A(2)A(3)A NVENTION A(2)A OSTOFFICE 
A(2)A NDING A(2)A OTION 
A(Q2)AC(DA NTENANCE A(Q2)A ONNOITER 
A(2)A NNING A(2)A ONNOITERING 
A(2)A NOON A(2)A OMEO 

A(QQ)A NION A(2)A OLHOUSE 
A(2)A NTING A(2)A ORROW 

A(2)A NNING A(2)A ORIOUS 

A(2)A NTON A(2)A PROPRIATE 
A(2)A NTING A(2)A PROPER 

A(2)A NTINE A(2)A PREPARATION 
A(Q2)A NNING A(2)A PREPARE 
A(2)A NTENCE A(2)A PREPAREDNESS 
A(2)A NTINEL A(2)A PREPARING 
A(2)A NKING A(2)A PROPER 

A(2)A NKEN A(2)A PROPORTION 


A(2)A NION A(2)A PROPOSALS 
A(2)A NOWN A(2)A PROPOSE 
A(2)A NTENABLE A(Q2)A PUMP 
A(2)A(4)A OMMODATION A(2)A PURPOSE 


OTTOM A(2)A PURPOSES 
OYCOTT A(Q2)A RBORNE 
OMMON A(2)A ROPRIATE 
OMPOSED A(2)A RMOR 
OMPOSITION A(Q2)A(4)A RMOREDCAR 
ONFORMATION A(2)A RMORY 
ONVOY A(2)A RIER 
ORPORAL A(2)A RPORAL 
A(2)A(4)A ORPORATION A(2)A RPORATION 
A(2)A OMHOUSE A(2)A RIER 

A(2)A OCTOR A(Q2)A RTURE 

A(2)A ORMOUS A(2)A RTER 

A(2)A OSION A(Q2)A RIORATE 
A(2)A OSIONS A(2)A RROR 

A(2)A OGHORN A(2)A RIOR 

A(2)A OLLOW A(2)A(4)A RAORDINARY 
A(2)A OTHOLD A(2)A RUARY 

A(2)A ONIOMETER A(2)A RWARD 


A(2)A OSCOPIC A(QQ)A RBOR 
A(2)A OOKOUT A(2)A HEADQUA RTERS 


A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A(4)A 
A(2)A(5)A 
A(2)A 
A(2)A 


OOOO -O.0 2 mm 


Q 
om 
mM 
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A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)AA 
A(2)A 
A(2)A 
A(2)A 
A(Q)A 
A(2)A 
A(2)A 
A(2)A(5)A 
A(2)A 
A(2)A 
A(2)A(3)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)AA 
A(2)A 
A(2)AA 
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ROGRAPHIC 
RFERE 
RFERENCE 
RFERING 

RIOR 

RROR 

RTAR 

RDER 

RVER 

RDER 

RDERED 
RDERS 
RAGRAPH 
RFORMANCE 
RAIRIE 
REARRANGED 
RIOR 

RIORITY 
ROGRAM 
ROGRESS 
ROGRESSIVE 
RTER 
RTERMASTER 
RTERS 

REAR 
REARGUARD 
RDER 
RECREATION 
RECREATIONAL 
RECRUIT 
RECRUITING 
REORGANIZATION 
REPRESENT 
REPRESENTATION 
REPRESENTATIVE 
REPRISAL 
REPRISALS 
RETREAT 
RETROACTIVE 
RTER 

RIOR 

RIORITY 

RROR 

RFARE 

SSES 
SPOSSIBLE 
SESSMENT 
SSESSMENT 


A(2)A(4)A 
A(2)AA(4)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)AA 
A(2)A 
A(2)A 
A(2)A 
A(2)AA 
A(2)AA 
A(2)AA 
A(2)A 
A(2)AA 
A(2)AA 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(Q)A 
A(2)A 
A(2)AA 
A(2)A 
A(2)A 
A(2)A 
A(2)A(A 
A(2)A 
A(2)A 
A(2)A 
A(2)AA 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(Q)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 
A(2)A 


CARELES 
CEN 

CHA 
CRUI 

DI 

DI 

DI 

DI 

DI 

DI 

DI 
EMBAS 
GLA 
HEAVYLO 
IS 

LO 

PA 


PO 


TRAN 
VES 

VI 
WITNE 
ADJU 
ADMINIS 
ADMINIS 
ARBI 
ASSIS 
AT 

CA 
CIRCUMS 
COMBA 
CONCEN 
CONCEN 
CONCEN 


SESSMENTS 
SSESSMENTS 
SETS 

SSIST 
SSISTANCE 
SSISTANT 
SNESS 
SORSHIP 
SSIS 

SERS 

SCUSS 
SCUSSED 
SCUSSION 
SEASE 
SMISS 
SMISSAL 
SPOSITION 
SIES 

SSES 

SSES 

SUES 

SSES 

SSES 
SESSION 
SSESSION 
SALS 

SALS 
SESSION 
SUBSISTENCE 
SUBSTITUTE 
SUBSTITUTION 
SUNSET 
SMISSION 
SELS 

SITS 

SSES 

TANT 
TRATION 
TRATIVE 
TRATION 
TANT 
TENTION 
TASTROPHE 
TANTIAL 
TANT 
TRATE 
TRATING 
TRATION 
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A(2)A CON TACT A(2)A THAT 

A(QA DEMONS TRATE A(2)A THATHAVE 
A(2)A DEMONS TRATED A(2)AA THATTHE 
A(2)A DEMONS TRATION A(2)A TIETH 

A(2)A DE TECTOR TERTANK 
A(2)A DE TENTION ULTURAL 
A(2)A EN TENTE UGOUT 
A(2)A(6)A EN TERTAINMENT UTGUARD 
A(2)A EX TENT UTPUT 

A(QQ)A FOX TROT URSUE 

A(2)A ILLUS TRATE URSUIT 

A(2)A ILLUS TRATION A(2)A(6)A UNSUCCESSFUL 
A(2)A IMPOR TANT A(2)A UNSUITABLE 
A(2)A INCOMPE TENT A(2)A VOLVE 

A(QQ)A INI TIATE A(2)A VOLVER 
A(2)A INS TANT A(2)A YWAY 

A(2)A INS TANTANEOUS A(2)A ZIGZAG 

A(2)A INS TANTLY A(3)A ACTUALLY 
A(2)A IN TENT A(3)A ALPHA 

A(2)A IN TENTION A(3)A ANIMAL 
A(2)A NONCOMBA TANT A(3)A ANNUAL 
A(2)A OU TPUT A(3)A(A ANTIAIRCRAFT 
A(2)A PENE TRATE A(3)A ANYWAY 
A(2)A PENE TRATION A(3)A APPEAR 
A(2)A PERSIS TENT AGB)AC)A APPEARANCE 
A(2)A PRO TECT A(3)A APPEARED 
A(2)A PRO TECTED A(3)A AVERAGE 
A(2)A PRO TECTION A(3)A AWKWARD 
A(Q2)A PRO TECTOR A(3)A C ANADA 

A(2)A PRO TEST A()A CARRIAGE 
A(Q)A PRO TESTED AQ)A CENTR ALIZATION 
A(2)A TESTS A(3)A CIRCUMST ANTIAL 

A(2)A TRATION AQ)A APPEAR 

A(2)A TENTION A(3)A APPEARED 
A(2)A TUATION A(3)A ASTWARD 
A(2)A TART A(B)A ABORATE 
A(2)A TARTER A(3)A ATEDAT 
A(2)A TISTICS AQG)A AMINATION 
A(Q)A TRATEGIC A(3)A ALALARM 
A(Q)A TRATEGICAL A(3)A ALSTAFF 
A(2)A TRATEGY A(3)A ADQUARTERS 
A(2)A TACTICAL A(3)A ABORATORY 
A(2)A TACTICS A(3)A ANGUAGE 
A(2)A TATTOO A(3)A AINTAIN 
A(2)A TENT A(3)A AINTAINED 
AQ)AQ)A TENTATIVE A(3)A ANUFACTURE 
A(2)A TENTH A(3)A ARSHAL 
A(2)A TEXT A(3)A ARTIAL 
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A(3)A 
A(3)A 
A(3)A(3)A 
A(Q)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
AQ)A 
A(3)A 
A(3)A 
A(3)A(4)A 
A(Q3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)ACQ)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 


RECONN 
REORG 


DEFI 
EFFI 

ELE 
GYROS 
INEFFI 
PA 

SPE 

SPE 

TE 
TRANSPA 


IN 


OR 

RE 
SURREN 
WE 

WIN 
ASS 

ASS 

ASS 
ATT 
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ATURAL 
ALIZATION 
ATURALIZATION 
ATURALIZE 
AVIGATION 
ANIZATION 
ANAMA 
AILWAY 
ARGUARD 
AISSANCE 
ANIZATION 
ABOTAGE 
ANITARY 
ANITATION 
ARHEAD 
ANSPACIFIC 
CAPACITY 
CHURCH 
COINCIDENCE 
CONSCRIPTION 
COUNCIL 
CIENCY 
CIENCY 
CTRICITY 
COPIC 
CIENCY 
CIFIC 

CIFIC 
CIFICATION 
CHNICAL 
CIFIC 
DECIDE 
DECIDED 
DECODE 
DIVIDE 
DIVIDING 
DERED 
DIVIDUAL 
DATED 
DERED 
DUCED 
DERED 
DNESDAY 
DWARD 
EMBLE 
ESSMENT 
ESSMENTS 
EMPTED 


A(3)A 
A(3)A(I)A 
A(3)AA(I)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A(I)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 


ERAGE 
ENNEEDED 
EENNEEDED 
EETLE 
EFORE 
ETWEEN 
ESSNESS 
EMETERY 
ETENESS 
EALMENT 
ERATE 
ECTNESS 
ECIDE 
ECIDED 
ECODE 
ECREE 
EGREE 
ELAYED 
ELIVER 
ELOPE 
ELOPED 
EVICE 
EVISE 
EASTERLY 
EASTERN 
ELONED 
EITHER 
ELEMENT 
ELEMENTARY 
EVATE 
ELEVEN 
ENTRENCH 
ENCHED 
ENTRENCHED 
ELOPE 
ERASE 
ERASER 
EDITE 
ERIMENT 
EXPRESS 
EXTREME 
ELAGE 
ERNMENT 
ENADE 
EAVIER 
ERATE 
EDIMENTA 
ECURE 
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A(3)A INT 
A(3)A INT 
A(3)A(1)A INT 
A(3)A INT 
A()A L 
A(3)A OP 
A(3)A(2)A OV 
A(3)A(1)A PAR 
A(3)A PAR 
A(3)A PR 
A(3)A(2)A PR 
A(3)A(2)A PR 
A(3)A PR 
A(3)A(2)A PR 
AQB)A PR 
A(3)A PR 
A(3)A PROC 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A(2)A R 
A(3)A R 
A(3)AA R 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A R 
A(3)A SCH 
A(3)A s 
A(3)A s 
A(3)A SEV 
A(3)A SEV 
A(3)A s 
A(3)AA SMOK 
A(3)A SP 
A(3)A THER 
A(3)A TW 
A(3)A W 
A(3)A 
A(3)A 
AQ)A c 

| A(3)A FLAS 
A(Q3)A P 
A(3)A sc 
A(3)A SEARC 


ERNMENT 
ERPRETATION 
ERPRETER 
ERVIEW 
EAGUE 
ERATE 
ERWHELMED 
ENTHESES 
ENTHESIS 
ECEDE 
ECEDENCE 
EFERENCE 
EPARE 
EPAREDNESS 
ESIDENT 
ESIDENTIAL 
EDURE 
EACHED 
ECOVER 
EDUCE 
EDUCED 
EFERENCE 
EFUGE 
EFUGEE 
EFUSE 
EGIMENT 
EGIMENTAL 
ESCUE 
ESUME 
ETIRE 
EDULE 
ECURE 
ETTLE 
ENTEEN 
ENTEENTH 
EVERE 
ESCREEN 
EARHEAD 
EFORE 
ENTIETH 
EATHER 
GARAGE 
GOING 
HURCH 
HLIGHT 
HOSPHOROUS 
HOOLHOUSE 
HLIGHTS 


A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q)A 
A(3)A 
A(3)A 
A(3)A 
AQ)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A(2)A 
A(3)A 
A(3)A 
A(3)A(3)A 
A(Q)A 
A(3)A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
AGA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 


BR 
CENTRAL 
Cc 

Cc 

Cc 
CLASSIF 
COMMUN 
CONST 
CONST 
COORD 
CR 

CR 

DED 

DEF 
DEMOBIL 
DETERM 
D 

D 
DISSEM 
DIST 
DIST 
DIST 
DIST 


HATTHE 
HOUGH 
IVITIES 
IPATION 
ICATION 
IFICIAL 
IBILITY 
IGADIER 
IZATION 
IRCUIT 
IRCUITOUS 
ITATION 
ICATION 
ICATION 
ITUTING 
ITUTION 
INATION 
ITICISE 
ITICISM 


ICATION 
INITION 
IZATION 
INATION 
IMINISH 
IRIGIBLE 
INATION 
INCTION 
INGUISH 
INGUISHED 
INGUISHING 
ISTRIBUTE 
IBUTING 
ISTRIBUTING 
IBUTION 
ISTRIBUTION 
ISTRICT 
ISTRICTS 
IVIDING 
IVISION 
IVISIONS 
INATION 
IRCLING 
IMATION 
INATION 
IBITION | 
INATION 
INGUISH 
ILITIES 
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A(3)A FIGHTING A(3)A IBILITY 

A(3)A HOST  ILITIES A(3)A(DA ISIBILITY 
A(3)A IDENTIF ICATION A(3)A LONEL 

A(3)A ILLUM  INATING A(3)A LETELY 
A(3)A ILLUM  INATION A(3)A LASHLIGHT 
A(3)A(DA INCLINING A(3)A LEGAL 

A(3)A IND ICATING A(3)A LEVEL 

A(QB)A INDICATION A(3)A LITTLE 

A(3)A INFLICT A(3)A LOCAL 
A(3)A(2)A INFLICTING A(3)A LEVEL 

A(3)A INITIATE A(3)A MUSEMENT 
A(3)A INQUIRE A(3)A MMITMENT 
A(3)A INQUIRY A(B3)A(IA MAXIMUM 
A(3)A IRATION A()A(DA MINIMUM 
A(3)A(3JA INSPIRATION A(3)A MOVEMENT 
A(3)A INSPIRE A(3)A NATING 
A(Q)A INST ITUTION A(3)A(A)A NNOUNCEMENT 
A(3)A(3)A INSTITUTION A(3)A NTENNA 
A(3)A INVEST IGATION A(3)A NTMENT 
A(3)A INVEST IGATIONS A(3)A NSION 

A(3)A ITATION A(3)A NTION 

A(3)A IGATION A(3)A(I)A NCERNING 
A(3)A ISSUING A(3)A NDEMN 
A(3)A IMITING A(3)A NDEMNED 
A(3)A ITATION A(3)A NEMENT 
A(3)A INTAIN A(3)A NTAIN 

A(B)A INTAINED A(3)A NTION 

A(8)A ILITIA A(3)A NSION 

A(3)A MOBIL IZATION A(3)A NCOUNTERED 
A(3)A NATURAL IZATION A(3)A NTRENCH 
A(3)A NAVIGATION A(3)A NTRENCHED 
A(3)A ORGAN IZATION A(3)A NSION 

A(3)A PRELIM  INARIES A(3)A NSION 

A(Q)A QUALIF ICATION A(3)A NATING 
A(3)A RECONNO = ITERING A(3)A NDEMNITY 
A(3)A REORGAN = IZATION A(3)A NSIGNIA 
A(3)A REQU _ISITION A(3)A NSTANT 
A(3)A RESPONS _IBILITY A(3)A(2)A NSTANTANEOUS 
A(B)A ITATION A(3)A NSTANTLY 
A(Q3)A IRIGID A(3)A - NTION 

A(Q)A IGHTING A(3)A NTERNAL 
A(3)A ILARITY A(3)A(4)A NTERNATIONAL 
A(3)A SPECIF ICATION A(3)A(2)A NTERNMENT 
A(3)A SUBST  ITUTION A(3)A INTERVE NTION 
A(3)A(IA SUITABILITY A(B)A I NTRENCH 
A(3)A VERIF ICATION A(3)A INVE NTION 

A(3)A VETER INARIAN A(3)A LAU NCHING 
A(3A VICINITY A()A MACHI NEGUN 
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A(3)A 
A(3)A 
AQB)A 
A(Q3)A 
AQG)A 
A(3)A 
A(Q)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q3)A 
A(3)A 
A(3)AA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)A 
A(Q3)A 
A(3)A 
A()A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 


REAPPOI 
RETE 
SEVE 
SEVE 

SUSPE 
U 
AIRC 
AN 
CHR 
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NTAIN 
NTAINED 
NTAIN 
NOTING 
NEHUNDRED 
NTOON 
NTMENT 
NTION 
NTEEN 
NTEENTH 
NSION 
NIDENTIFIED 
ONTROL 
ONYMOUS 
ONOLOGICAL 
ODEBOOK 
ONTROL 
ONTROVERSY 
OSSROADS 
ONTROL 
OOTHOLD 
ORENOON 
OXTROT 
ORIZON 
ORATORY 
OCOMOTIVE 
OROLOGICAL 
ONOPOLY 
OUTBOARD 
OUTPOST 
OUTPOSTS 
OSPHORUS 
ONTOON 
OSTPONE 
ORTION 
OTOCOL 
PPROPRIATE 
PASSPORT 
PHOSPHORUS 
POSTPONE 
PROMPT 
PSHIP 
PSHIPS 
RBITRATION 
RIBERY 
RRIER 
ROVERSY 
RIDOR 


AQ)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)A 
AQ)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Z)A(2)A 
A(3)A 
A(3)A 
AQG)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(B3)A 
A(3)A 
A(3)A 
A(3)A 
AQ)A 
A(3)A 
A(3)A 
A(3)A 


INTERP 
LABO 
NO 

NO 


a> ks ie” ia” io is Ses > Mia» a ° Als = a <i > a | 


ROSSROADS 
ROYER 
ROYERS 
RASER 
RTHER 
RTHER 
ROPER 
RETER 
RATORY 
RTHERLY 
RTHERN 
RATOR 
REARRANGED 
REFER 
REFERENCE 
REFERRED 
REPARATION 
REPARE 
REPAREDNESS 
REPARING 
RESCRIBED 
RESERVATION 
RESERVE 
RIMARY 
ROPER 
ROPORTION 
RAILROAD 
RGUARD 
RECORD 
RECORDER 
REDCROSS 
REFER 
REFERENCE 
REGARDING 
REPORT 
REPORTED 
RESERVATION 
RESERVE 
RESERVES 
RESTRAINT 
RESTRICTED 
RESTRICTION 
RETIRE 
RETIRING 
RETURN 
RETURNED 
RETURNING 
REVERSE 
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A(3)A 
A(Q)A 
A()A 
A()A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q3)A 
A(3)A(4)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)A 
A(3)AA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)AA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(Q)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)A 


BATTLE 
BU 
CARELES 
CARELE 
COLLI 
DI 

DI 

DI 

DI 

DI 

DI 


STATI 


SU 
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RIGOROUS 
RIVER 
ROGER 
RETARY 
RATURE 
RITORY 
REFORE 
RAVERSE 
RINARIAN 
SCENSION 
SPOSSIBLE 
SSESSMENT 
SSESSMENTS 
SSETS 
STICS 
SHIPS 
SINESS 
SNESS 
SSNESS 
SIONS 
SCUSS 
SCUSSED 
SCUSSION 
SMISS 
SMISSAL 
SPERSE 
SPERSED 
SPERSION 
STRESS 
STRESSED 
SIONS 
SSIES 
SIONS 
SSUES 
STICS 
SMANSHIP 
SAGES 
SIONS 
SSESSION 
SIONS 
SPONSIBLE 
SPONSIBILITY 


SATISFACTORY 


SATISFY 
SHIPS 
STICS 
STRESS 
SPENSE 


A()A 
A(3{)A 


—A(3)A 


A(3)A 
A(3)AA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)AA 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A(3)A 
A(3)A 
A()A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 
A(3)A 


AC 
ALLO 
AN 
APPOIN 


AU 
COMMI 
COMPAR 
CONS 
CONS 
CONS 
CON 
COUN 
DEPAR 
DEPAR 
DES 
DES 
DE 

DE 

DE 

DIS 
DIS 
DIS 
EIGH 
ENLIS 
ES 
ESTIMA 
ES 

ES 

ES 

EX 

FA 

FIF 
FOUR 
HOS 
HOS 
ILLI 


SPENSION 
SMISSION 
SVERSE 
SHIPS 
SELESS 
SSELS 
SHIPS 
TIVITIES 
TIVITY 
TMENT 
TEDATING 
TMENT 
TLANTIC 
TEMPT 
TEMPTED 
TTENTION 
TOMATIC 
TMENT 
TMENT 
TITUTE 
TITUTION 
TRUCTION 
TRACT 
TERATTACK 
TMENT 
TMENTAL 
TITUTE 
TRUCTION 
TONATE 
TONATED 
TONATION 
TINCTION 
TRICT 
TRICTS 
TEENTH 
TMENT 
TIMATE 
TEDAT 
TIMATEDAT 
TIMATES 
TIMATION 
TRACT 
TALITY 
TEENTH 
TEENTH 
TILITIES 
TILITY 
TERATE 
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A(3)A TITUTION A(4)A ADJUTANT 
A(3)A TRUCT A(4)A AERONAUTICS 
A(3)A TRUCTION | AA AIRCRAFT 
A(3)A TRUCTIONS A(4)A AIRPLANE 
A(3)A TRUCTOR A(A)A ALASKA 
A(3)A TIGATE A(4)A ALLOCATION 
A(3)A TIGATION A(4)A ALLOWANCE 
A(Q)A TIGATIONS A(4)A ALMANAC 
A(3)A TEENTH A(4)A AMBULANCE 
A(3)A TRUCTIONS A(4)A AIRCRAFT 
A(3)A OU TPOST A(4)A ANTITANK 
A(3)A OU TPOSTS A(4)A APPARATUS 
A(3)A PA TRIOTIC A(4)A APPROACH 
A(3)A REAPPOIN TMENT A(4)A ARABIA 

A(3)A RECONS TRUCTION A(4)A ARRIVAL 
A(3)A REENLIS TMENT A(4)A ASSURANCE 
A(3)A RES TRICTED A(4)A AUTOMATIC 
A(3)A TRICTION , A(4)A AVAILABLE 
A(3)A TREAT A(4)A ACHHEAD 
A(3)A TEENTH A(4)A AUSEWAY 
A(3)A TEENTH A(4)A ASTGUARD 
A(3)A TREET A(4)A APHICAL 
A(3)A TITUTE A(4)A ACTICABLE 
A(3)A TITUTION A(4)A AUGURATION 
A(3)A TAXATION A(4)A ATIONAL 
A(3)A THATTHE A(4)A ARKSMANSHIP 
A(3)A THIRTEEN A(4)A ATERIAL 
A(3)A TEENTH A(4)A ATIONAL 
A(3)A(3)A THIRTEENTH A(4)A ATIONALISM 
AQ)A THIRTY A(4)A ATIONALITY 
A(3)A TRACT A(4)A AUTICAL 
A(3)A TRACTOR A(4)A ALATTACK 
A(3)A TRANSA  TLANTIC A(4)A AVALBASE 
A(3)A(2)A TWENTIETH A(4)A AVALBATTLE 
A(3)A TWENTY A(4)A ARAGRAPH 
A(3)A TWENTYFIVE A(4)A ARALLAX 
A(3)A(I)A TEDSTATES A(4)A ACTICAL 
A(3)A TILITY A(4)A ADIOACTIVE 
A(3)A THOUT A(4)A AILHEAD 
A(3)A UREAU A(4)A AILROAD 
A(3)A UFFEUR A(4)A ATIONAL 
A(3)A UITOUS A(4)A ATISFACTORY 
A(3)A UNIQUE A(4)A ATURDAY 
A(3)A URPLUS A(4)A ACTICAL 
A(3)A URROUND A(4)A ATERTANK 
A(3)A UNUSUAL A(4)A CHARACTER 
A(3)A WESTWARD ACACIA CHARACTERISTIC 
A(3)A WINDWARD A(4)A CHEMICAL 
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A(4)A 

A(4)A COIN 
A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A IN 
A(4)A ME 
A(4A PRE 
A(4)A RE 
A(4)A CON 
A(4)A CON 
A(4)A 

A(4)A 

A(4)ACIA 

A(4)A 

AACA 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A IN 
A(4)A ALT 
A(4)A ASS 
A(4)A 
A(4)A 
A(4)A(I)A 
A(4)ACIA 
A(4)A 
A(4)A 
A(4)A COMM 
A(4)A COMP 
A(4)A CONF 
A(4)A CONSID 
A(4)A D 
A(4)A D 


Qunwnw 
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CLERICAL 
CIDENCE 
COLLECT 
COLLECTION 
CONDUCT 
CONNECTING 
CONNECTION 
CONTACT 
CORRECT 
CORRECTED 
CORRECTION 
CORRECTNESS 
CRITIC 
CRITICAL 
CRITICISE 
CRITICISM 
CIDENCE 
CHANIC 
CEDENCE 
CEPTACLE 
DEMNED 
DENSED 
DEFEND 
DEFENDER 
DEFENDED 
DEMAND 
DEMANDED 
DEPEND 
DEPENDABILITY 
DEPENDABLE 
DEPENDENT 
DISLODGE 
DOWNED 
DEPENDENT 
ERNATE 
EMBLIES 
EACHHEAD 
ECAUSE 
EENNEEDED 
ELLIGERENT 
ESIEGED 
ENTERED 
ENCEMENT 
ENSATE 
ERENCE 
ERABLE 
ECEMBER 
ECIPHER 


A(QAC)A 
A(4)A(2)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(A)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A()A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)AA 
A(4)AA 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A(I)A 
A(4)A 
A(4)AA 
A(4)AA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)ACI)A 
A(QA 
A(4)A 


OUD ODdD 


DEF 


OUUUD 


DEF 


DE 
DE 
DE 
DIFF 
ECH 

EFF 
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ELS 


EXC 


EX 
EX 


ECIPHERED 
ECIPHERMENT 
ECLARE 
ECLARED 
EFEATED 
ECTIVE 
EFENDED 
EFENDER 
EFENSE 
EFENSES 
ENSIVE 
EFERRED 
EFICIENCY 
EFICIENT 
EMANDED 
EPARTED 
EPENDENT 
EPLOYED 
EPORTED 
ESERTED 
ESERTER 
ETACHED 
ERMINE 
ERMINED 
ELOPMENT 
ERENCE 
ELONMENT 
ECTIVE 
EIGHTEEN 
EIGHTEENTH 
EWHERE 
EMERGENCY 
ENCODE 
ENCODED 
ENEMIES 
ENGAGE 
ENGAGEMENT 
ENGINE 
ENGINEER 
ENGINEERING 
ENTIRE 
EUROPE 
EUROPEAN 
ESSIVE 
EXCITE 
EXCITEMENT 
ERCISE 
ERCISES 
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EXP ENSIVE A(4)A 
EXT ENSIVE A(4)A 
FL EXIBLE A(4)A 
IMM__EDIATE A(4A 
IMPR- ESSIVE A(4)A 
INC ENTIVE A(4)A 
INCOMP ETENCE A(4)A 
IND EPENDENT A(4)A 
A(4)A(Q)A INT ELLIGENCE A(4)A 
A(4)A INT ELLIGENT A(QA 
A(4)A INT ENSIVE A(4)A(IA 
A(4)A INT ERFERE A(4)A 
A(4)A INTERF ERENCE A(4)A 
A(4)AQ)A INT ERFERENCE A(4)A 
A(4A INTERMEDIATE A(4)A(6)A 
A(4)A ERPOSE A(4)A 
A(4)A ERVENE A(4)A 
A(4)A ECTURE A(4)A(I)A 
A(4)A ETTERED A(4)A 
A(4)A ENANCE A(4)A 
A(4)A(IA EASUREMENT A(4)A 
A(4)A(L)A EASUREMENTS A(4)A 
A(4)A ESSAGE A(4)A 
A(4)A ESSAGES A(4)A 
A(4)A ELLANEOUS A(4)A 
A(4)A(2)A EGLIGENCE A(4)A 
A(QA EGLIGENT A(4)A 
A(4)A ECTIVE A(4)A 
A(4)A ENSIVE A(4)A 
A(4)A ETRATE A(4)A 
A(4)A ERMANENT A(4)A 
A(4)A EDENCE A(4)AA EVENTEEN 
A(4)A ERENCE A(4)AA EVENTEENTH 
A(4)A EFERRED A(4)A ESCREEN 
A(4)A ESERVE A(4)A ESSIVE 
A(4)A ESSURE A(4)A ENDERED 
A(4)A ESSIVE A(4)A EPHONE 
A(4)A EFINDER A(4)A(I)A ERMOMETER 
A(4)A EADINESS A(4)A EATENED 
A(4)A ECEIVE A(4)A ENABLE 
A(4)A ECEIVER A(4)A EHICLES 
A(4)A ECOMMEND A(4)A FORTIFIED 
ACA ECOMMENDATION A(4)A GAGING 
A(A)A(Q)A ECOMMENDED A(4)A GHTING 
A(4A ECORDER A(4)A GHTING 
A(4)A ERENCE A()A BREAKT HROUGH 
A(4)A EFUGEE A(4)A S HARPSHOOTER 
A(4)A EGISTER A(4)A T HROUGH 


EJECTED 
ELEASE 
ELIEVE 
EMEDIES 
EMEMBER 
EPAIRED 
EPEATED 
EPEATER 
EPELLED 
EPLACE 
EPLACEMENT 
EPORTED 
EPRESENT 
EPRESENTATION 
EPRESENTATIVE 
EPULSED 
EQUIRE 
EQUIREMENT 
ESERVE 
ESERVES 
ESTORED 
ETURNED 
EVENUE 
EVERSE 
EVIEWED 
EVOLVE 
EVOLVER 
EALEVEL 
ELECTED 
ENTINEL 
ERVICE 


NANMNNAMNAAMAAADAAAADAAAAADAAAAAADAAAAIADA 
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A(4)A ARB 
A(4A)A CONC 
A(4)A CONF 
A(4)A CONF 
A(4)A CONF 
A(4)A CONT 
A(4A DES 
A(4)A D 
A(4)A DIFF 
A(4)A D 
A(4)A D 
A()A(DA D 
A(AA D 
A(A)AQ)A D 
A(MA ENG 
A(4)A 

A(A)A(1)A(3)A 

A(4)A 

A(4)A 

A(4)A 

A(4)A(3)A 

A(4)A(3)A 

A(4)A 

A(4)A IMM 
A(4)A 

A(4)A 

A(4)AQ)A 

A(4)A 

A(4)A 

A(4)A 

A(4A 

A(4)A LEG 
A(4)A L 
A(4)A NAT 
A(4)A NAT 
A(4)A PH 
A(4)A PRES 
A(4)A RES 
A(AA 8 
A(4)A S 
A(4)A S 
A(A)AQ)A UN 
A(4)A Vv 
A(4)A AGRICU 
A(4)A BATT 
A(4)A E 
A(4)A F 
A(4)A I 
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ITRATION A(4)A 
ILIATION A(4)A 
IDENTIAL A(4)A 
IRMATION A(4)A 
ISCATION A(4)A 
INUATION A(4)A 
IGNATION A(4)A 
IETITIAN A(4)A 
ICULTIES A(4)A 
IMENSION A(4)A 
IRECTION A(4)A 
ISPOSITION A(4)A(2)A 
ISSEMINATED A(4)A 
ISSEMINATION A(4)A 
INEERING A(4)A 
IDENTICAL A(4)A 
IDENTIFICATION A(4)A 
IDENTIFY A(4)A 
IGNITION A(4)A 
ILLUMINATE A(4)A 
ILLUMINATING A(4)A 
ILLUMINATION A(4)A 
IMMEDIATE A(4)A 
IGRATION A(4)A 
IMPEDIMENTA A(4)A 
INDIVIDUAL A(4)A 
INEFFICIENCY A(4)A 
INHABITED A(4)A 
INTERIOR A(4)A 
INVADING A(4)A 
INVASION A(4)A 
ISLATION A(4)A 
IABILITY A(4)A 
IONALISM A(4)A 
IONALITY A(4)A 
ILIPPINES A(4)A 
IDENTIAL A(4)A 
IGNATION A(4)A 
IGNIFICANCE A(4)A 
IGNIFICANT A(4)A 
ITUATION A(4)A 
IDENTIFIED A(4)A 
ICTORIOUS A(4)A 
LTURAL A(4)A 
LEFIELD A(4)A 
LIGIBLE A(4)A 
LEXIBLE A(AA 
LLEGAL A(4)A(2)A 


CON 

co 
COORDI 
DEFI 
DESIG 
DETERMI 
DETO 
DISSEMI 
DISTI 
DOMI 


EXAMI 
EXPLA 
EXTERMI 
IG 
ILLUMI 

I 

I 

I 


LEGISLATION 
LIABILITY 
LBATTLE 
MICBOMB 
MBARDMENT 
MENCEMENT 
MPARTMENT 
MPLOYMENT 
MPEDIMENTA 
MARKSMANSHIP 
MEDIUM 
MEDIUMBOMBER 
MILLIMETER 
NITION 
NCEMENT 
NTITANK 
NGEMENT 
NTERING 
NCIDENCE 
NCEMENT 
NFERENCE 
NFIDENCE 
NFIDENT 
NFIDENTIAL 
NECTING 
NTINENTAL 
NATION 
NITION 
NATION 
NATION 
NATION 
NATION 
NCTION 
NATION 
NDURANCE 
NGAGING 
NEERING 
NTERING 
NTRAIN 
NTRAINED 
NATION 
NATION 
NATION 
NITION 
NATION 
NCIDENCE 
NCIDENT 
NDEPENDENT 
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A(4)A 
A(4)A 
A(QA 
ACA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(A)A 
A(4)A 
A(DA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(QA 
A(4)A 
ACA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(A)A 
A(4)A 
A(QA 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4AA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 


NI 
NI 


RA 
RECOG 
RESIG 
ROADJU 
SIG 

SY 

U 

U 
VETERI 
ACCOMM 


ALL 


NFLUENCE 
NATIONAL 
NVADING 
NCTION 
NTENANCE 
NITIONS 
NATIONAL 
NATIONALISM 
NATIONALITY 
NETEEN 
NETEENTH 
NOTHING 
NGEFINDER 
NITION 
NATION 
NCTION 
NALLING 
NCHRONIZE 
NEXPENDED 
NKNOWN 
NARIAN 
ODATION 
OCATION 
OMICBOMB 
ODEBOOK 
OSITION 
ORATION 
ORRIDOR 
ORATION 
ONATION 
OSITION 
ORENOON 
ODUCTORY 
OCATION 
OPINION 
OSITION 
OVERCOMING 
OSITION 
OSITIONS 
OJECTOR 
OMOTION 
OTECTOR 
OVISION 
OVISIONS 
OLUTION 
OLUTIONARY 
OBACCO 
OMORROW 


A(4)A 
A(4JAA 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(QA 
A(4)A 
A(DA 
A(4)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(A)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 
A(4)A 


DI 
EXTRAO 
FI 

INST 

NO 

P 

P 


BU 
CARELE 
CROS 

DI 


ORPEDO 
PHILIPPINES 
POGRAPHIC 
RCONTROL 
REDCAR 
RACTER 
RACTERISTIC 
RCULAR 
RRIDOR 
RUISER 
RUISERS 
RECTOR 
RDINARY 
REALARM 
RUCTOR 
RTHWARD 
REFERRED 
RESSURE 
REPAIR 
REPAIRED 
REQUIRE 
REQUIREMENT 
REQUIRING 
RESEARCH 
RESOURCES 
RESTORED 
RUBBER 
RUNNER 
RENDER 
RENDERED 
RRITORY 
RACTOR 
RAILERS 
RAWLER 
RIGGER 
SMENTS 
SOONAS 
SINESS 
SSNESS 
SROADS 
STRESS 
STRESSED 
SLANDS 
SSAGES 
SFIRES 
SSIONS 
SKIRTS 
SONERS 
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A(4)A RE SERVES A(4)A REINSTA TEMENT 
A(4)A RE SPECTS A(4)A RES TRAINT 

A(4)A SHARPSHOOTER A(4)A RE TALIATION 
A(4)A SHELLS A(4)A RE TROACTIVE 
A(4)A SMOKESCREEN A(4)A SOU THEAST 

A(4)A SPOOLS A(4)A SOU THWEST 
A(4)A SPOONS A(4)A SOU THWESTERN 
A(4)A STATES A(4)A STA TEMENT 
A(A)A(3)A STATISTICS A(4)A STATISTICS 
A(4)A STATUS A(4)A TARGET 

A(4)A STRESS A(4)A TENTATIVE 
A(4)A STRIPS A(4)A TERRITORY 
A(4)AA SUBMISSION A(4)A THREAT 

A(4)A SUBSISTENCE A(4)A THREATENED 
A(4)AA SUCCESS A(4)A TRADITIONAL 
A(4)AA SUCCESSFUL A(4)A TURRET 
A(4)AA SUCCESSFULLY A(4)A TWELFTH 
A(4)AA SUCCESSIVE A(4)A L UMINOUS 
A(4)A SUGGEST A(4)A MAN  UFACTURE 
A(4)A SUNRISE A(5)A ACCEPTABLE 
A(4)A SUPPOSE A(5)A ACCEPTANCE 
A(4)A TRAN SPORTS A(5)A ACCOMPANY 
A(4)A UNITED STATES A(5)A ACCORDANCE 
A(4)AA UN SUCCESSFUL A(5)A ADVANTAGE 
A(4)A USELESS A(5)A ADVANTAGEOUS 
A(4)A AL TERNATE A(5)A ALLEGIANCE 
A(4A)A AL TERNATING A(5)A ALTERNATE 
A(4)A A  TTEMPT A(5)A ALTERNATING 
A(4)A A TTEMPTED A(5)A AMBASSADOR 
A(4)A CHARAC TERISTIC A(5)A AMERICA 
A(4)A CON TINENTAL A(5)A AMERICAN 
A(4)A CON TINUATION A(5)A ANTENNA 
A(4)A COUN TERATTACK A(5)A APPEARANCE 
A(4)A DIS TRIBUTE A(S)A APPLICATION 
A(4)A DIS TRIBUTING A(5)A APPROVAL 
A(4)A DIS. TRIBUTION A(5)A ARBITRARY 
A(4)A ELEC TRICITY A(5)A ARBITRATION 
A(4)A EXCI TEMENT A(5)A ASSISTANCE 
A(4)A INS TALLATIONS A(5)A ASSISTANT 
A(4)A IN TEGRITY A(5)A ASSOCIATE 
A(4)A IN TEREST A(5)A ASSOCIATION 
A(4)A IN TERESTING A(5)A ASSOONAS 
A(4)A IN TERNATIONAL A(S)A C ABLEGRAM 
A(4)A LIEU TENANT A(5)A C  AMOUFLAGE 
A(4)A NOR THEAST A(5)A C ANCELLATION 
A(4)A NOR THWEST A(5)A DIS APPEARANCE 
A(A NOR THWESTERN A(5)A EXTR AORDINARY 
A(4)A OUTSKIRTS A(S)A M AINTENANCE 
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A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(S)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A(Q)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(QS)A 
A(5)A 


Q 
BZa9 
SoOovc0Uo D or 


wERomomome 
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ALIFICATION 
ARTERMASTER 
ADIOGRAM 
ADIOSTATION 
ATEGICAL 
ANSATLANTIC 
CEPTANCE 
CORDANCE 
CHRONICLE 
COEFFICIENT 
COMMENCE 


COMMENCEMENT 


COMMERCE 
CONFISCATION 
CONFLICT 
CONTACT 
CREPANCIES 
CREPANCY 
CONOMIC 
DRESSED 
DVANCED 
DGEHEAD 
DAMAGED 
DECIDED 
DELAYED 
DROPPED 
DICATED 
EPTABLE 
EPTANCE 
EGIANCE 
EARANCE 
ELESSNESS 


' EARANCE 


EFFICIENT 
ENTRATE 
ESPONDENCE 
ECREASE 
ECREASED 
EDICATE 
EFINITE 
EPARTMENT 
EPARTMENTAL 
ENDABLE 
EPLOYMENT 
ESCRIBE 
ESCRIBED 
ESTROYED 
ESTROYER 


A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A(IDA 
A(S)A(DA 
A(5)AA 
A(5)A 
A(5)A 
AG)A(A 
AGS)A(QQVA 
A(S5)A 
A(S)A(DA 
A(5)A 
A(GS)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
AG)A(Q)A 
A(5)A 


DESTROYERS 
ETACHMENT 
ETONATE 
ETONATED 
ETRAINED 
EVELOPED 
EARANCE 
EPANCIES 
EMINATED 
EFFECTED 
EFFICIENCY 
EFFICIENT 
EIGHTEEN 
EIGHTEENTH 
ELEVATE 
ELSEWHERE 
EMPLACEMENT 
EMPLOYEE 
EMPLOYER 
ENCIPHER 
ENCIPHERED 
ENCIPHERMENT 
ENFORCE 
ENFORCEMENT 
ENGINEER 
ENGINEERING 
ENLISTED 
ENROLLED 
ENTENTE 
ERPRISE 
EQUIPMENT 
ESCORTED 
EXCLUDE 
ECUTIVE 
EXPANDED 
EXPELLED 
EXPENDED 
EXPENSES 
ERIENCE 
EXPERIENCE 
EXTENDED 
EXTREME 
ERPLANE 
ELICOPTER 
EFFICIENCY 
ERCEPTED 
ERPRETER 
ERRUPTED 
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A(5)A ETPLANE A(5)A ISPERSION 
A(S)A EDICINE A(5)A IFICATION 
A(S)A ESSENGER A(5)A IMPASSIBLE 
A(5)A EWSPAPER A(5)A IMPOSSIBLE 
A(5)A EWSPAPERS A(5)A INCENDIARY 
A(5)A EHUNDRED A(5)A INCENTIVE 
A(5)A ENTHESES A(5)A INCLINING 
A(S)A ERSISTENT A(5)A INCLUDING 
A(5)A ERSONNEL A(5)A INCLUSIVE 
A(5)A EMATURE A(5)A INDEMNITY 
A(5)A ESCRIBED A(5)A INFLATION 
A(5)A ERMASTER A(5)A INSIGNIA 

A(5)A EPTACLE A(5)A INTEGRITY 
A(5)A ENFORCE A(5)A INTELLIGENCE 
A(5)A(I)A ENFORCEMENT A(5)A INTELLIGENT 
A(5)A ENLISTED A(5)A INTENSIVE 
A(5)A EMAINDER A(5)A INTENTION 
A(5)A EQUESTED A(5)A INTERDICT 
A(5)A ESOURCES A(5)A(2)A INTERDICTION 
A(5)A EABORNE A(5)A INTERVIEW 
A(5)A EAPLANES A(5)A INVENTION 
A(5)A ENTENCE A(5)A INVESTIGATE 
A(S)A EPARATE A(5)A(3)A INVESTIGATION 
A(5)A EPTEMBER A(5)A(3)A INVESTIGATIONS 
A(5)A EVENTEEN A(5)A IMITATION 
A(S)A EVENTEENTH A(5)A ILIZATION 
A(5)A ELLFIRE A(5)A IMINARIES 
A(5)A ERATURE A(S5)A IFICATION 
A(S)A ERRIBLE A(5)A IOSTATION 
A(5)A EREFORE A(5)A ISTRATION 
A(5)A EXPENDED A(5)A IGNALLING 
A(5)A ENTIFIED A(5)A IMILARITY 
A(5)A EDSTATES A(5)A IFICATION 
A(S)A GINNING A(5)A ITABILITY 
A(5)A GASSING A(S)A IFICATION 
A(5)A GETTING A(5)A ISIBILITY 

A(S5)A GARDING A(5)A CHRONO LOGICAL 

A(5)A HTEENTH A(5)A CLERICAL 

A(5)A ISTRATION A(5)A INF LAMMABLE 
A(5)A ISTRATIVE A(5)A LOGICAL 

A(5)A ICIPATION A(5)A METEORO LOGICAL 

A(S)A IFICATION A(S)A LITICAL 

A(S)A IDERATION A(S)A MMENCEMENT 
A(5)A ILIZATION A(5)A MPLACEMENT 
A(5)A ISCIPLINE A(5)A MPROVEMENT 
A(5)A ISCONTINUANCE A(5)A MANAGEMENT 
A(5)A ISCONTINUE A(S)A MARITIME 
A(5)A ISCUSSION A(GS)A MAXIMUM 
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A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 


A(F\A 


ALLOA 
A(5)A 
A(5)A 
A(S5)A 
A(5)A 
A(5)A 
A(QS)A 
A(S5)A 
A(S)A( IA 
A(S)A(3)A 
A(5)A 
A(5)A 
A(S5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(i)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S5)A 
A(S5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 

A(5)A 

A(5)A 

A(S)A 


MA 
RECOMME 
RECON 
REPRESE 
SIG 

SIG 


RADI 


MINIMUM 
MBURSEMENT 
NDATION 
NSATION 
NTRATING 
NCERNING 
NDITION 
NNECTING 
NECTION 
NTINGENT 
NUATION 
NTRABAND 
NVENIENT 
NTINUANCE 


NIPAAUTARTTIZ GS 
INDIV YT LAINKAD 


NLISTING 
NGLEMENT 
NDATION 
NCLINING 
NCLUDING 
NTERMENT 
NTERVENE 
NTERVENING 
NTERVENTION 
NVASION 
NAGEMENT 
NDATION 
NAISSANCE 
NTATION 
NIFICANCE 
NIFICANT 
NSATLANTIC 
OCIATION 
OALITION 
OLLISION 
OLLISIONS 
ONDITION 
ORMATION 
ONTINUOUS 
ORRESPONDENCE 
ORRESPONDING 
ORMATION 
ORMATION 
ODUCTION 
OPERATOR 
OPORTION 
OTECTION 
OSTATION 


A(5)A 
A(S)A 
A(5)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(5)A 
A()A 
A(5)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(5)A 
A(S)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(S)A 
A(S)A 
A(5)A 
A(S)A 
A(5)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(S)AA 
A(5)AA 
A(S)A 
A(S)A 
A(S)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 


REC 
TRANSP 


PSYCH 
QUARTE 


ST 
SU 
s 


CIRCUM 
CRO 


OGNITION 
ORTATION 
PHILIPPINES 
PRINCIPAL 
PRINCIPLE 
RSUPPORT 
RBITRARY 
RTILLERY 
ROMETER 
REAKTHROUGH 
RECONTROL 
RALALARM 
ROMETER 
ROMETER 
ROMETER 
RPRETER 
REGULAR 
REGULARITIES 
REGULARITY 
REMATURE 
RISONER 
RISONERS 
ROCEDURE 
ROMETER 
RMASTER 
RADIOGRAM 
RECOVER 
REENFORCE 
REENFORCEMENT 
REGISTRATION 
REGULAR 
REIMBURSEMENT 
REINFORCE 
REINFORCEMENT 
RAGGLER 
RRENDER 
RRENDERED 
RANSFER 
RANSFERRED 
RANSFERRING 
RANSPORT 
RANSPORTATION 
RANSPORTS 
RANSVERSE 
SSMENTS 
SSOONAS 
STANCES 
SSROADS 
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A(S)A 
A(5)A 
A(S)A 
A(5)A 
A(5)A 
A(S5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(QS)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A 
A(5)A 
A(S5)A 
A(5)A 
A(SJACI)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(5)A 
A(S)A(Q3)A 
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STRICTS 
STABLISH 
STABLISHED 
STABLISHMENT 
SPAPERS 
SPHORUS 
SITIONS 
SOURCES 
SAILORS 
SECTORS 
SERIOUSLY 
SKIRMISH 
SUBMISSION 
SUCCESS 
SUCCESSFUL 
SUCCESSFULLY 
SUCCESSIVE 
SURPLUS 
SURPRISE 
SUSPENSE 
SUSPENSION 
SUCCESSFUL 
TICIPATE 
TICIPATION 
TIFICATE 
TINGENT 
TIFICATION 
TRUMENT 
TRUMENTS 
TERCEPT 
TERCEPTED 
TERDICT 
TERDICTION 
TERMENT 
TERPRETATION 
TERPRETER 
TERRUPT 
TERRUPTED 
TERRUPTION 
TERVENTION 
TRODUCTION 
TRODUCTORY 
TERMASTER 
TISFACTORY 
TABILITY 
TONIGHT 
TRAJECTORY 
TRANSATLANTIC 


qc 
Zz 


AvovosvyrTcvooeD 


oUOD 


TEDSTATES 
UBSTITUTE 
UBSTITUTION 
ANTICIPATE 
ANTICIPATION 
ASSIFICATION 
ARTMENTAL 
ADITIONAL 
ANSPORTATION 
CCEPTANCE 
CCORDANCE 
CERTIFICATE 
CUMSTANCES 
CLEARANCE 
COMMUNICATE 
COMMUNICATION 
CONSTRUCTION 
CONSTRUCTION 
DDRESSED 
DECLARED 
DEFEATED 
DEFENDED 
DEFERRED 
DEMANDED 
DEPARTED 
DEPLOYED 
DEPORTED 
DESERTED 
DETACHED 
DICTATED 
DISARMED 
DERSTAND 
DERSTOOD 
EENNEEDED 
ELLIGERENT 
ECIPHERED 
EFECTIVE 
EFENSIVE 
EPARTURE 
ESIGNATE 
ESIGNATED 
ESPATCHED 
ESPATCHES 
ESTITUTE 
ERIORATE 
ETERMINE 
ETERMINED 
EVELOPMENT 


A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)ACI)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(G)A(A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 


A(6)A(IJA 


Table D-7—Continued 


ECHELONED A(6)A 
ELIGIBLE A(6)A 
EMBASSIES A(6)A 
EMPLOYEE A(6)A(I)A 
EMPLOYMENT 
ENCIRCLE 
ENCOUNTER 
ENCOUNTERED 
EMYPLANES 
ENFILADE 
ENGAGEMENT 
ENLISTMENT 
ENROLLMENT 
ENTANGLE 
ENTANGLEMENT 
ERTAINMENT 
ENTRAINED 
ENVELOPE 
EQUALIZE 
EQUIVALENT 
ESTIMATE 
ESTIMATEDAT 
ESTIMATES 
EVACUATE 
EXCAVATE 
EXCHANGE 
EXCITEMENT 
EXERCISE 
EXERCISES 
EXHIBITED 
EXPEDITE 
EXPERIMENT 
ERMINATE 
ERMINATE 
ESTIGATE 
EASUREMENT 
EASUREMENTS 
ECHANIZED 
ESSITATE 
ERWHELMED 
ENETRATE 
EARRANGED 
ECEDENCE 
EFERENCE 
EPAREDNESS 
ECOGNIZE 
EENFORCE 
EENFORCEMENT 


DISTIN 


EENLISTED 
ENLISTMENT 
EFERENCE 
EIMBURSEMENT 
EINFORCE 
EINFORCEMENT 
EINSTATE 
EINSTATEMENT 
EPLACEMENT 
ENTATIVE 
EQUIREMENT 
ESTRICTED 
ENTYFIVE 
ECHNIQUE 
ELEPHONE 
ENTATIVE 
ERMOMETER 
ENTYFIVE 
GUISHING 
GROUPING 
GUARDING 
GNALLING 
IRCULATION 
IPLOMATIC 
ISORGANIZED 
ISPOSITION 
ISTINCTION 
ISTINGUISH 
ISTINGUISHED 
INGUISHING 
ISTINGUISHING 
INGERPRINT 
IDENTIFICATION 
IMPRACTICABLE 
IMPRESSION 
IMPRESSIVE 
INDICATING 
INDICATION 
INEFFICIENCY 
INFLICTING 
INSECURITY 
INSPECTION 
INVITATION 
IRRIGATION 
IDENTIFIED 
ITHDRAWING 
MEASUREMENT 
MEASUREMENTS 


D-85 


D-86 


A(6)A(2)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(@)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 
A(6)A 


COMMU 


CONCE 


lil onlin le 


ag 
aaqaaqaaqaad > 
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MORANDUM 
NICATION 
NCEALMENT 
NTRATION 
NCESSION 
NCLUSION 
NFESSION 
NFINEMENT 
NNECTION 
NGUISHING 
NCIRCLING 
NEMYPLANES 
NLISTMENT 
NROLLMENT 
NTERTAINMENT 
NTRUCKING 
NGERPRINT 
NDICATING 
NFLATION 
NFLICTING 
NSTANTANEOUS 
NSTRUMENT 
NSTRUMENTS 
NTENTION 
NTERNMENT 
NVENTION 
NEGLIGENCE 
NEGLIGENT 
NINETEEN 
NINETEENTH 
NORTHERN 
NUMBERING 
NIZATION 
NNAISSANCE 
NOITERING 
NLISTMENT 
NIZATION 
NITATION 
NSFERRING 
NDERSTAND 
OLLECTION 
OMMISSION 
OMMISSIONER 
ONCESSION 
ONCLUSION 
ONFESSION 
ONNECTION 
OPERATION 


moO 


THE 


SU 
SU 
AT 


OMINATION 
OUNDATION 
OBJECTION 
OPERATION 
OPULATION 
OSSESSION 
PARAGRAPH 
RICULTURAL 
RIGADIER 
RODUCTORY 
RREGULAR 
RREGULARITIES 
RREGULARITY 
ROJECTOR 
ROTECTOR 
REARGUARD 
RECEIVER 
RECONSTRUCTION 
RECORDER 
REGISTER 
REJECTOR 
REMEMBER 
REPEATER 
REVOLVER 
RMOMETER 
RAJECTORY 
RANSFERRED 
RANSFERRING 
SEMBLIES 
SUALTIES 
STOMHOUSE 
SPATCHES 
STROYERS 
SPATCHES 
STINGUISH 
STINGUISHED 
STINGUISHING 
STIMATES 
SOLDIERS 
SOUTHEAST 
SOUTHWEST 
SOUTHWESTERN 
STATIONS 
SUPPLIES 
SPICIONS 
SPICIOUS 
TACHMENT 


CHARA 


IN 


Table D-7—Continued 


TAINMENT 
TRALIZATION 
TACHMENT 
TERIORATE 
TERMINATION 
TAINMENT 
TERMINATE 
TERMINATION 
TERMINATE 
TERNMENT 
TIONALITY 
TATEMENT 
TATEMENT 
TEMPERATURE 
TWENTIETH 
USTOMHOUSE 
ULTANEOUS 
UCCESSFUL 
UCCESSFULLY 
USPICIOUS 
UCCESSFUL 
VENTYFIVE 
WITHDRAW 
WITHDRAWAL 
WITHDRAWING 
WITHDREW 
ACCIDENTAL 
ACCOMMODATION 
ADDITIONAL 
APPROPRIATE 
APPROXIMATE 
ARMOREDCAR 
ARTIFICIAL 
ATURALIZATION 
CTERISTIC 
CLASSIFICATION 
CONFERENCE 
CONFIDENCE 
CONSPIRACY 
CONVALESCENT 
COMPETENCE 
ECIPHERMENT 
DECREASED 
DESCRIBED 
DESTROYED 
DETONATED 
DETRAINED 
DEVELOPED 


A(I)A 
ACA 
A(T)A 
A(I)A 
A(7)A 
A()A 
A(I)A 
A()A 
A(I)A 
A(T)A 
A(DA 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(T)A 
A(7)A 
A(7I)A 
A(I)A 
A(7)A 
A(7T)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(I)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(I)A 
A(I)A 
A(7)A 
A(7)A 
A(TI)A 
A(DA 
A()A 
A()A 
A(7)A 
A(T)A 
A(T)A 
A(I)A 
A(I)A 
A(7)A 
A(TI)A 


comme omne® 


IN 
IN 


or a 


AUnmartawaZaz 


DISCUSSED 
DISPERSED 
DOMINATED 
DENTIFIED 
ENTRALIZE 
ENTRALIZE 
ENTRALIZED 
EMOBILIZE 
EPENDABLE 
ECHELONMENT 
EFFECTIVE 
ELABORATE 
EMPLACEMENT 
ENCIPHERED 
ENDURANCE 
ENFORCEMENT 
ENTRENCHED 
EXCESSIVE 
EXCLUSIVE 
EXECUTIVE 
EXPANSIVE 
EXPENSIVE 
EXPLOSIVE 
EXTENSIVE 
EADQUARTERS 
EAVYBOMBER 
EAVYLOSSES 
ELLIGENCE 
ERMEDIATE 
EGLIGENCE 
EAPPOINTED 
ECEPTACLE 
ECOMMENDED 
ECONNOITER 
ECONNOITERING 
ENFORCEMENT 
EENLISTMENT 
ESISTANCE 
GINEERING 
HOTOGRAPHY 
HIRTEENTH 
INISTRATION 
INISTRATIVE 
IFFICULTIES 
ISTRIBUTING 
ISTRIBUTION 
IMMIGRATION 
INDETERMINATE 
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A()A 
A(7)A 
A(I)A 
A(I)A 
A(T)A 
A(TI)A 
A(7)A 
A(7)A 
A(T)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(I)A 
A(7)A 
A(7)A 
ACA 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A()A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(T)A 
A(T)A 
A(1)A 
A(7)A 
A(7)A 
A(T)A 
A(I)A 
A()A 
A(T)A 
A(7)A 
A(I)A 
A(7T)A 
A(T)A 
A(7)A 
A(DA 
A(I)A 
A(7)A 
A(I)A 


QqQo0aoaaqae,r 
Coco gd 


DEMO 


Zz 
° 


PS 
RECO 
REE 
REI 
REI 
TRA 
ACC 
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INFORMATION 
INSPIRATION 
INSTITUTION 
INSTRUCTION 
INSTRUCTIONS 
INTERESTING 
INTERFERING 
INTERMEDIATE 
INTERNATIONAL 
INTERVENING 
MECHANISM 
MEDIUMBOMBER 
NOUNCEMENT 
NGRESSIONAL 
NSTITUTING 
NSUMPTION 
NVALESCENT 
NSTRATION 
NFORCEMENT 
NGINEERING 
NCOMPETENCE 
NCOMPETENT 
NDEPENDENT 
NDETERMINATE 
NDICATION 
NEFFICIENCY 
NSPECTION 
NTELLIGENCE 
NTELLIGENT 
NTERESTING 
NTERFERENCE 
NTERFERING 
NTERVENING 
NVITATION 
NCOMBATANT 
NETRATION 
NNOITERING 
NFORCEMENT 
NFORCEMENT 
NSTATEMENT 
NSMISSION 
OMMODATION 
OMPETITION 
OMPOSITION 
OMPUTATION 
ONGRESSIONAL 
ONSUMPTION 
OOPERATION 


A(T)A 
A(7)A 
A()A 
A()A 
A(DA 
A(7)A 
A(T)A 
A(I)A 
A(7)A 
A(7)A 
A(7)A 
A(7)A 
A(T)A 
A(7)A 
A(1A 
A(7)A 
ACI) A 
A(7)A 
A(T)A 
A(T)A 
A(7)A 
A(7)A 
A(T)A 
A(7)A 
A(7)A 
A(T)A 
A(7)A 
A(I)A 
A(7)A 
A(TI)A 
A(TI)A 
A(7T)A 
A(T)AQ)A 
ACI)A 
A(DA 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 
A(8)A 


DIS 


CORR 


ORDINATION 
ORPORATION 
ONSTRATION 
OCCUPATION 
OPPOSITION 
OCLAMATION 
PHOTOGRAPHY 
RMOREDCAR 
RAORDINARY 
RTHWESTERN 
RELIMINARIES 
RELIMINARY 
REMAINDER 
RPSHOOTER 
SSEMBLIES 
SESSMENTS 
SIGNMENTS 
STILITIES 
STRUMENTS 
SUREMENTS 
SEAPLANES 
STANDARDS 
TTACHMENT 
TTAINMENT 
TIMATEDAT 
TELLIGENT 
TERMEDIATE 
TERPRETATION 
TURALIZATION 
THERMOMETER 
THIRTEENTH 
TRANSPORT 
TRANSPORTATION 
TRANSPORTS 
YESTERDAY 
ADMINISTRATION 
ADMINISTRATIVE 
ANTIAIRCRAFT 
COINCIDENCE 
CONTINUANCE 
DECIPHERED 
DESIGNATED 
DESPATCHED 
DETERMINED 
DISPATCHED 
DISTRESSED 
ERTIFICATE 
ESPONDENCE 
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A(8)A D EMONSTRATE A(8)A CO NSTRUCTION 
A(8)A D EMONSTRATED A(8)A CO NTINUATION 
A(8)A DESCRIPTIVE A(8)A CO NVERSATION 
A(8)A D ETERIORATE A(8)A E NCIPHERMENT 
A(8)A ENCIPHERMENT A(8)A E NTANGLEMENT 
A(8)A ENCOUNTERED A(8)A E NTERPRISING 
A(8)A ENEMYPLANES A(8)A I NFORMATION 
A(8)A ENTANGLEMENT A(8)A I NSPIRATION 
A(8)A ENTERPRISE A(8)A INSTITUTION 
A(8)A ESTABLISHED A(8)A I NSTRUCTION 
A(8)A IND ETERMINATE A(8)A INSTRUCTIONS 
A(8)A IRR EGULARITIES A(8)A I NTERNATIONAL 
A(8)A M EDIUMBOMBER A(8)A NAVIGATION 
A(8)A NECESSITATE A(8)A RECO NSTRUCTION 
A(8)A P ERFORMANCE A(8)A C OMMENDATION 
A(8)A PR ELIMINARIES A(8)A C OMPENSATION 
A(8)A R EAPPOINTMENT A(8)A C ONCILIATION 
A(8)A R EENFORCEMENT A(8)A C ONFIRMATION 
A(8)A R EIMBURSEMENT A(8)A C ONFISCATION 
A(8)A R EINFORCEMENT A(8)A C ONFORMATION 
A(8)A R EINSTATEMENT A(8)A C ONSCRIPTION 
A(8)A REPR ESENTATIVE A(8)A C ONSTITUTION 
A(8)A RESPONSIBLE A(8)A C ONSTRUCTION 
A(8)A RETROACTIVE A(8)A C ONTINUATION 
A(8)A S  EVENTYFIVE A(8)A C ONVERSATION 
A(8)A T EMPERATURE A(8)A DEM OBILIZATION 
A(8)A HYDROGRAPHIC A(8)A MOBILIZATION 
A(8)A D ISCREPANCIES A(8)A OBSERVATION 
A(8)A ILLUSTRATION A(8)A OBSTRUCTIONS 
A(8)A INAUGURATION A(8)A REC OMMENDATION 
A(8)A INSTALLATIONS A(8)A REC ONSTRUCTION 
A(8)A INTERDICTION A(8)A R OADJUNCTION 
A(8)A INTERRUPTION A(8)A QUA RTERMASTER 
A(8)A INTERVENTION A(8)A A  SSESSMENTS 
A(8)A INTRODUCTION A(8)A ASSIGNMENTS 
A(8)A(I)A IRREGULARITIES A(8)A IN STRUCTIONS 
A(8)A IRREGULARITY A(8)A INVE STIGATIONS 
A(8)A MEMORANDUM A(8)A OB STRUCTIONS 
A(8)A ADMINISTRATION A(8)A REPRE SENTATIONS 
A(8)A A NNOUNCEMENT A(8)A SCHOOLHOUSE 
A(8)A CA NCELLATION A(8)A SUBMARINES 
A(8)A CO NCENTRATING A(8)A SUSPICIONS 
A(8)A CO NCILIATION A(8)A SUSPICIOUS 
A(8)A CO NFIRMATION A(8)A AN  TIAIRCRAFT 
A(8)A CO NFISCATION A(8)A EN TANGLEMENT 
A(8)A COQ NFORMATION A(Q)A AGRICULTURAL 
A(8)A CQ NSCRIPTION A(Q)A CHRONOLOGICAL 
A(8)A CO NSTITUTION A(Q)A CIRCUMSTANCES 
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A(9)A 
A(Q)A 
A(9)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(9)A 


AIOV\A 
MHA 


A(Q)A 
A(Q)A 
A(Q)A 
A(QQA 


AQ)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(9)A 
A(Q)A 
A(9)A 
A(9)A 
A(Q)A 
A(9)A 
A(Q)A 


RE 


D 
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CONNAISSANCE 
DEMOBILIZED 
DISAPPEARED 
DISINFECTED 
ECENTRALIZE 
ECENTRALIZED 
ENTERTAINMENT 
ESTABLISHMENT 


BYTEDMIN ATO 
BALL 


IRCUMSTANTIAL 
INVESTIGATION 
INVESTIGATIONS 
NTICIPATION 


NOGNTD ATION 
ANUIIN LWA LAIN 


NSIDERATION 
NTERTAINMENT 
NTIFICATION 
NAUGURATION 
NSTALLATIONS 
NTERDICTION 
NTERRUPTION 
NTERVENTION 
NTRODUCTION 
NONCOMBATANT 
NSPORTATION 
OMMUNICATION 
ONCENTRATION 
ONSIDERATION 
ORGANIZATION 
ORGANIZATION 
RANGEFINDER 


A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(Q)A 
A(QA 
A(Q)A 
A(Q)A 


AQDA 
ACLI)A 
A(LI)A 
ACLI)A 
A(i2)A 
A(12)A 


DI 
IN 
IN 
MI 
EN 
ES 


CE 


— 


RECONNOITER 
RECONNOITERING 
SCREPANCIES 
STALLATIONS 
STANTANEOUS 
SCELLANEOUS 
TERTAINMENT 
TABLISHMENT 
TRANSATLANTIC 
TRANSPORTATION 
UNSUCCESSFUL 
COUNTERATTACK 


DEMONSTRATED 
DISORGANIZED 


BAIN 


DISSEMINATED 
INTERPRETATION 
IRREGULARITIES 
NTRALIZATION 
NVESTIGATION 
NVESTIGATIONS 
NORTHWESTERN 
REVOLUTIONARY 
SEARCHLIGHTS 
SIMULTANEOUS 
CORRESPONDENCE 
DECENTRALIZED 
DISTINGUISHED 
ECONNAISSANCE 
NTERPRETATION 
NATURALIZATION 
SPECIFICATIONS 


APPENDIX E 
UTILITY TABLES 


Table E-1. Expected number of repetitions, polyalphabetic ciphers. 


Number Expected number of digraphs occurring exactly x times 
of 
letters K(3) (4) E(6) (7) (8) E(9) (10) 


Number | Expected number of trigraphs Number Number 
of of of 
letters E(2) E(3) E(4) letters K(2) E(3) letters 


E-1 


Table E-2. Expected values of or, and op. 


wCcmOonn nt RP Wh = 


234691218 
Prime 

219 

313 
24581020 
Prime 
23671421 
Prime 
241122 


Table E-3. Factor table. 
NUMBERS 1—400 


385915 

2 23 

Prime 
234681216 24 
7 

251025 

317 

241326 

Prime 
23691827 
511 
24781428 
319 

229 

Prime 
2345610 12 15 20 30 
Prime 

231 

37921 
2481632 

513 
23611 22 33 
Prime 

2417 34 

3 23 
257101435 
Prime 
234689 12 18 24 36 
Prime 

237 

35 15 25 
241938 

711 
23613 26 39 
Prime 
24581016 2040 
39 27 

241 

Prime 
23467121421 28 42 
517 

2 43 

3 29 
2481122 44 


Prime 
235691015 18 3045 
713 

2 4 23 46 

331 

247 

519 
23468 12 16 24 32 48 
Prime 

271449 
391133 
245 10 20 25 50 
Prime 
236173451 
Prime 

24813 2652 
357 15 21 35 
253 

Prime 
2346912 18 27 36 54 
Prime 

251011 2255 

3 37 

24781416 2856 
Prime 
236193857 

5 23 

2429 58 
391339 

259 

717 


23456810 12 15 20 24 


30 40 60 

11 

261 

341 

243162 

5 25 
23679141821 4263 
Prime 

24816 32 64 
3 43 

251013 26 65 
Prime 


E-3 


E-4 


23461112 22 33 44 66 
719 

267 

35915 2745 
248173468 

Prime 

236 23 46 69 

Prime 
24571014 20 28 35 70 
347 

271 

1113 
23468912 16 18 24 36 
48 72 

5 29 

273 

3721 49 

243774 

Prime 
23561015 25 30 50 75 
Prime 

24819 38 76 

391751 
2711142277 

531 
234612 13 26 39 52 78 
Prime 

279 

3 53 
2458 1016 20 32 40 80 
7 23 

2369 1827 5481 
Prime 

2441 82 

35111533 55 

2 83 

Prime 
23467812 1421 24 28 
42 56 84 

13 

251017 34 85 
391957 

24 43 86 

Prime 


Table E-3—Continued 


23629 58 87 

5 7 25 35 

24811 16 22 44 88 

3 59 

289 

Prime 
2345691012 15 18 20 
30 36 45 60 90 

Prime 

2713142691 

361 

24823 46 92 

537 

23631 6293 

1117 

244794 

379 21 27 63 
2510193895 

Prime 
2346812 16 24 32 48 
64 96 

Prime 

297 

35 13 15 39 65 
24714 28 49 98 
Prime 

236911 18 22 33 6699 
Prime 

2 458 10 20 25 40 50 100 
3 67 

2101 

729 
23461217 3451 68 102 
5 41 

2103 

39 23 69 
24813 16 26 52 104 
1119 
235671014 15 21 30 35 
42 70 105 

Prime 

2453 106 

371 

2 107 


5 43 

234689 12 18 24 27 36 
54 72 108 

731 

2109 

373 

2451011 20 22 44 55 110 
1317 

2363774111 

Prime 
247814 16 28 32 56 112 
359 15 25 45 75 

2113 

Prime 
234612 19 38 57 76114 
Prime 

2510 23 46115 
3711213377 
2482958 116 

Prime 

2369 13 18 26 39 78 117 
5 47 

2459118 

379 

27141734119 

Prime 

2345681012 151620 
24 30 40 48 60 80 120 
Prime 

21122121 

392781 

2461 122 

573549 

236 41 82 123 

1319 

2483162 124 

3 83 

25 10 25 50 125 

Prime 

23467912 141821 28 
36 42 63 84 126 

11 23 

2 127 

35151751 85 


24816 32 64128 

Prime 

2 36 43 86 129 

737 

245 10 13 20 26 52 65 130 
39 29 87 

2131 

Prime 

234681112 22 24 33 44 
66 88 132 

553 

271419 38 133 

3 89 

2467 134 

Prime 

235691015 18 27 30 45 
54 90 135 

Prime 

2481617 3468136 
3713213991 

2137 

5 11 25 55 
2346 12 23 46 69 92 138 
Prime 

2139 

393193 
24578 1014 20 28 35 40 
56 70 140 

Prime 

2364794141 

Prime 

2471142 
3515195795 

21113 22 26 143 

741 
234689121618 24 32 
36 48 72 96 144 

17 

25 10 29 58 145 

397 

2473 146 

Prime 

2367 14 21 42 49 98 147 
559 


Table E-3—Continued 


2483774148 

39 11 27 33 99 

2 149 

13 23 

2345610 12 15 20 25 30 
50 60 75 100 150 

743 

2151 

3101 

2481619 38 76 152 

561 

236917 183451 102 153 
Prime 

24711 14 22 28 4477 154 
3 103 

251031 62 155 

Prime 

23468 12 13 24 26 39 52 
78 104 156 

Prime 

2157 
35791521 35 45 63 105 
2479158 

Prime 

23653 106 159 

11 29 

2458 10 16 20 32 40 64 80 
160 

3 107 

2714 23 46 161 

1719 

2346912 18 27 365481 
108 162 

5 13 25 65 

2163 

3 109 

24841 82 164 

747 

23561011 15 22 30 33 55 
66 110 165 

Prime 

2 483 166 

3937111 

2 167 


5 67 

23467812 141621 24 
28 42 48 56 84 112 168 
Prime 

2 13 26 169 

3113 

2451017 20 34 68 85 170 
1131 

236918 193857 114171 
749 

248 43 86 172 

3515 23 69 115 

2173 

Prime 

2346 12 29 58 87 116174 
Prime 

25710 14 25 35 50 70175 
3913 2739117 

24811 16 22 32 44 88 176 
Prime 

23659118 177 

571 

2489178 
387172151119 

2179 

Prime 

234568910 12 15 18 20 
24 30 36 40 45 60 72 90 
120 180 

19 

2181 

381133121 

2471314 26 28 52 91 182 
573 

23661 122 183 

Prime 

248 16 23 46 92 184 
3941123 
25103774185 

753 
234612 31 62 93 124 186 
Prime 

21117 22 34 187 

35 15 25 75 125 


E-5 


E-6 


2 4847 94 188 

13 29 
23679141821 27 42 
54 63 126 189 

Prime 

2451019 20 38 76 95 190 
3127 

2191 

Prime 

23468 12 16 24 32 48 64 
96 128 192 


Table E-3—Continued 


571135 55 77 

2 193 

39 43 129 

2497 194 

Prime 
235610 13 15 26 30 39 
65 78 130 195 

17 23 
247814 28 49 56 98 196 
31381 

2197 


5 79 

2346911 12 18 22 33 

36 44 66 99 132 198 

Prime 

2199 

3719 21 57 133 

2458 10 16 20 25 40 50 80 
100 200 


Table E-4. Table of Primes up to 2000. 


E-7 


F-0 


APPENDIX F 


CRYPTANALYSIS SUPPORT PROGRAM 


F-1. Program Support 


This program supports the development of FM 34-40-2, Basic Cryptanalysis. It gives 
the capability to encipher and decipher messages in monoalphabetic and 
polyalphabetic substitution systems, produce a variety of statistical data about the 
encrypted messages, and print the results or save them to disk. Because of its limited 
yal re the program does not support on-screen analysis. The printed results can be 
used off-line to aid in analysis, however. The program should be particularly useful in 
preparing examples and exercises for training cryptanalytic techniques. 


F-2, On-screen Analysis 


The logical structure is present in the program to support on-screen analysis, if 
desired. The coding that now sends results to disk or printer can be modified to display 
on screen as well. Pines 6060 through 6780 provide the basis for this. This code together 
with the alphabet entry subroutines in lines 3920 through 5760 can be used to enter 
partial tralocoveri and see the results for both monoalphabetic and polyalphabetic 
systems. 


F-3. Program Format 


The listing has been specially formatted to make it easy to follow the eon logic. 
Each statement in multiple statement numbered lines has been printed on a separate 
line with each follow-on statement indicated by the statement separator (colon) at the 
beginning of the line. FOR-NEXT commands have been indented to show the level 
ad structure of each. Similarly, the parts of IF... THEN...ELSE statements have been 
printed on separate lines and then indented to show their structure clearly. If the 
program is typed in by hand, the statements in a single numbered line should be 
entered continuously, not on separate lines in most versions of BASIC. Indentation of 
FOR-NEXT structures can be preserved, if desired, but not for IF... THEN...ELSE 
statements. 


100 ‘CRYPTANALYSIS SUPPORT PROGRAM 

120 ' Version 1.0 

140 ‘4 October 1988 

160 ' 

180 ‘' Developed in support of FM 34-40-2, Basic Cryptanalysis to provide 
200 ’ accurate encryption, decryption, frequency counts, and statistics for use 
220 ‘in the manual. It can be used for other applications. 

240 ’ 

260 ’ The program was written in GW-BASIC. 

280 ' It is readily adaptable to any computers that run 

300 ’ GW-BASIC. It can easily be converted to run in other BASIC languages. 
320 ’ 

340 ’ As written, the program will print on a dot matrix printer with the name 
360 ‘ PRN1 that uses standard Epson control codes. If necessary, change the 
380 ‘ values in the *** Printer Setup *** section for the particular printer 

400 ’ to be used. 

420 ' 

440 ' *** Printer Setup *** 

460 PRINTER$=“PRN1” 

480 FORMFEED$=CHR{§(12) 

500 CRLFS=CHRS$(13)+CHR$(10) ’ (not used in 1.0) 

520 CONDENSED$=CHR§(15) ' (not used in 1.0) 

540 DC2$=CHR$(18) ' Cancels condensed mode (not used in 1.0) 

560 ELITE$=CHR$(27)+“M” ' (not used in 1.0) 

580 PICA$=CHR$(27)+“P” ’ (not used in 1.0) 

600 ' 

620 ' *** Initialize Variables *** 

640 DIM PTEXTD$(25), PTEXTI$(25), CTEXTD$(25), CTEXTI$(25) 

660 ' Plain and ciphertext may be stored in two forms: display and internal. 


680 ' Display forms (PTEXTD$() and CTEXTD()) are as typed with spaces. 

700 ' Internal forms (PTEXTI$() and CTEXTI$()) have spaces, and nonliteral 
720 ‘ characters stripped away. All frequency counts and ICs are performed on 
740 ‘' CTEXTI§() strings. Up to 25 lines of text are allowed, as written. 

760 ' Additional lines of text may be used if all uses of “25” are increased 

780 ‘ in the DIM statement in line 640. 


800 DIM MFREQ(26), PFREQ(20,27), DIFREQ(26,26), PHIMONO,PHIPERI(20), PHIDIG, 
PMIXFREQ(20,27), SET 1(26), SET 2(27), MATCH (27), PERPHISUM(20), PERTOTLTR(20) 

820 ‘ Sets up monographic, periodic, and digraphic frequency, IC tables. Up 

840 ' to 20 alphabets are allowed for periodic frequencies, as written. The 

860 ' number of alphabets can be increased by increasing all uses of “20” in 

880 ‘' the DIM statements in line 800. 

900 DIM PCOMP$, CCOMP$(200) ’ Variables for plain and cipher components with up 

920 ' to 200 cipher component sequences for long running key aperiodics. The 

940 ' length of the key may be increased by increasing the “200” in the DIM 

960 ‘ statement in line 900. 

1000 ' 


1020 KEY OFF’ Turns off prompts on bottom of screen. 
1040 ’ 


F-2 


1160 
1180 
1200 
1220 


1240 
1260 
1280 
1300 
1320 
1340 
1360 
1380 
1400 
1420 
1440 


1460 
1480 
1500 
1520 
1540 
1560 
1580 
1600 
1620 
1640 


1660 
1680 
1700 
1720 
1740 
1760 


1780 
1800 
1820 
1840 
1860 
1880 
1900 
1920 
1940 
1960 


"*** Main Menu *** 

CLS 

PRINT ” CRYPTANALYSIS SUPPORT PROGRAM’ 
PRINT 

‘PRINT 

PRINT ” 1. Enter text ";STATUS$(1) 

PRINT ” 2. Encipher text ;STATUS$(2) 

PRINT ” 3. Decipher text ";STATUS$(3) 

PRINT ” 4. Print text 'SSTATUS$(4) 

PRINT ” 5. Save text to disk ";STATUS$(5) 

PRINT " 6. Calculate frequency counts, ICs ";STATUS$(6) 
PRINT 7. Print frequency counts, ICs “;STATUS$(7) 
PRINT ” 8. Save frequency counts, ICs to disk ';STATUS$(8) 
PRINT ” 9. Find repeats ";STATUS$(9) 

PRINT ” 10. Quit’ 

PRINT 

:PRINT 

" *** Main Menu Control *** 

INPUT ” Enter your choice: '’,SELECTION 


ON SELECTION GOSUB 1600,3000,3480,6080,6380,6840,8600,9960, 10240, 10980 
GOTO 1180 


’*** Text Entry Subroutine *** 


CLS 

PRINT ” TEXT ENTRY MENU” 
PRINT 

:PRINT 

:PRINT 

PRINT ” 1. Enter plaintext from disk 
PRINT ” 2. Enter ciphertext from disk 
PRINT ” 3. Enter plaintext from keyboard 
PRINT "” 4. Enter ciphertext from keyboard 
PRINT ” 5. Return to Main Menu 

PRINT 

:PRINT 


INPUT “Enter your choice: ”, CHOICE 
ON CHOICE GOTO 1860,2040,2220,2440,2600 


‘*** Plaintext Disk Entry *** 
INPUT “Enter input filename, for example, ASSAMPLE.TXT  ”,INFILE$ 
OPEN INFILE$ FOR INPUT AS #1 
NRLINES=0 
NRLINES = NRLINES + 1 
INPUT #1, PTEXTD$(NRLINES) 
IF EOF(1) 
THEN STATUS$(1)=” (PLAINTEXT ENTERED)’ 
:CLOSE #1 


‘RETURN 


1980 
2000 
2020 
2040 
2066 
2080 
2100 
2120 
2140 


2160 
2180 
2200 
2220 
2240 
2260 
2280 
2300 
2320 


2340 
2360 


2380 
2400 


ere 


2420 
2440 
2460 
2480 
2500 
2520 


2540 


9EaN 
eévuVU 


2580 
2600 
2620 
2640 
2660 
2680 
2700 
2720 


2740 


GOTO 1920 


' *** Ciphertext Disk Entry *** 
INPUT “Enter input filename, for example, A:SAMPLE.TXT _ ”,INFILE$ 
OPEN iINFILE$ FOR iNPUT AS #1 
NRLINES=0 
NRLINES =NRLINES+1 
INPUT #1,CTEXTD$(NRLINES) 
IF EOF(1) 
THEN CLOSE #1 
:‘STATUS$=" (CIPHERTEXT ENTERED)” 
:GOTO 2660 ' Branches to internal text preparation. 
GOTO 2100 
‘*** Plaintext Keyboard Entry *** 
PRINT “Type a line of text. Use lower case letters only.” 
PRINT “Use no commas in the text. When you are through,” 
PRINT “type END on a new line.” 
NRLINES=0 
LINE INPUT T$ 
IF T$=“END” OR T$=“end” 
THEN STATUS$(1) =“ (PLAINTEXT ENTERED)” 
:RETURN 
NRLINES=NRLINES+1 
PTEXTD$(NRLINES)=T$ 
GOTO 2300 


‘ *** Ciphertext Keyboard Entry *** 
PRINT “Type a line of text. Use CAPITAL letters only.” 
PRINT “When you are through, type END on a new line.” 
NRLINES=0 
INPUT T$ 
IF T$=“END” OR T$=“end” 
THEN STATUS$(1)=" (CIPHERTEXT ENTERED)” 
:GOTO 2660 
NRLINES=NRLINES +1 


CTEYTHCINDI INECSC\— 
VICALU DINING] 


GOTO 2500 
RETURN 


Cy 
ey 


‘*** Preps Ciphertext in Internal Format *** 


CAD TEVT! INIC—4A THA AIDE INICS 
PUM POCATLING— | PY NALIINCDO 


T$=CTEXTD$(TEXTLINE) 
POSN=0 
POSN=POSN+1 
:IF POSN>LEN(T$) 
THEN 2800 
C$=MID$(T$,POSN, 1) 


F-3 


2760 


2780 
2800 
2820 
2840 
2860 
2880 
2900 
2920 
2940 
2960 
2980 
3000 
3020 
3040 


3060 
3080 
3100 
3120 


3140 


3160 


3180 


3200 


3220 


3240 
3260 


3280 
3300 
3320 


3340 


3360 
3380 


IF (ASC(C$)<65 OR ASC(C$)>90) AND C$<>*“.” 
THEN GOSUB 2900 
GOTO 2720 
CTEXTIS$(TEXTLINE) =T$ 
NEXT TEXTLINE 
RETURN 


‘ *** Subroutine to Strip Nonliteral Characters From Ciphertext *** 
TS$=MID§(T$, 1, POSN-1)+MID$(T$,POSN +1,LEN(T$)-POSN) 
POSN=POSN-1 

RETURN 


‘*** Encipherment Subroutine *** 

GOSUB 3940 

CYCLEPOS=0 

FOR LNE=1 TO NRLINES 
:-CTEXTD$(LNE) =” 
‘KTEXTD$(LNE) =” 


:-NEXT LNE 


FOR LNE=1 TO NRLINES 
FOR CHARPOS=1 TO LEN(PTEXTD$(LNE)) 
PCHAR$=MID$(PTEXTD$(LNE),CHARPOS, 1) 
IF PCHARS=" ” 
THEN CCHAR$=" " 
:KCHAR$S=""" 
:GOTO 3320 
CYCLEPOS=CYCLEPOS +1 
:IF CYCLEPOS>PERIOD 
THEN CYCLEPOS=1 
KCHAR$=MID$(REPEATKEY$,CYCLEPOS, 1) 
IF ASC (PCHAR$) >64 AND ASC(PCHAR$)<91 
THEN PCHAR$=CHR$(ASC(PCHAR$) +32) 
IF ASC(PCHAR$)<97 OR ASC(PCHAR$)> 122 
THEN PCHAR$=“.” 
IF PCHAR$=".” 
THEN CCHAR$=“.” 
:GOTO 3320 
FOR ALPHCHAR=1 TO 26 
IF PCHAR$=MID$(PCOMP$,ALPHCHAR, 1) 
THEN CCHAR$=MID$(CCOMP$(CYCLEPOS),ALPHCHAR, 1) 
:GOTO 3320 
NEXT ALPHCHAR 
CCHAR$=“.” 
CTEXTD$(LNE) =CTEXTD$(LNE)+CCHAR$ 
:-KTEXTD$(LNE) =KTEXTD$(LNE)+KCHAR$ 
NEXT CHARPOS 


NEXT LNE 
GOSUB 2660 


3400 STATUS$(2)=“ (ENCIPHEREMENT COMPLETED)” 
3420 RETURN 
3440 ' 
3460 ' *** Decipherment Subroutine *** 
3480 GOSUB 3940 
3500 CYCLEPOS=0 
3520 FOR LNE=1 TO NRLINES 
:PTEXTD$(LNE)=" ": 

NEXT LNE 
3540 FOR LNE=1 TO NRLINES 
3560 FOR CHARPOS=1 TO LEN(CTEXTD$(LNE)) 


3580 CCHAR$=MID$(CTEXTD$(LNE), CHARPOS,1) 
3600 IF CCHAR$="_ ” 

THEN PCHAR$="_ ” 

:GOTO 3780 
3620 CYCLEPOS=CYCLEPOS +1: 


IF CYCLEPOS>PERIOD 
THEN CYCLEPOS=1 


3640 IF ASC(CCHAR$)>96 AND ASC(CCHAR$)< 123 
THEN GCGHAR$=CHR$(ASC(CCHAR$)-32) 
3660 IF ASC(CCHAR$)<65 OR ASC(CCHAR$)>96 
THEN CCHAR$=“.” 
3680 IF CCHAR$=".” 
THEN PCHAR$=“.” 
:GOTO 3780 
3700 FOR ALPHCHAR=1 TO 26 
3720 IF CCHAR$=MID$(CCOMP$(CYCLEPOS),ALPHCHAR, 1) 
THEN PCHAR$=MID$(PCOMP$,ALPHCHAR, 1) 
:GOTO 3780 
3740 NEXT ALPHCHAR 
3760 PCHAR$=“.” 
3780 PTEXTD$(LNE)=PTEXTD$(LNE)+PCHARS 


3800 NEXT CHARPOS 

3820 NEXT LNE 

3840 GOSUB 2660 

3860 STATUS$(3)=“ (DECIPHERMENT COMPLETED)” 
3880 RETURN 

3900 ' 

3920 ‘ *** Alphabet Entry Subroutine *** 

3940 PCOMP$=“abcdefghijkimnoparstuvwxyz” 

3960 CCOMPO$=“ABCDEFGHIJKLMNOPQRSTUVWXYZ” 
3980 RKEY$=“AAAAAAAAAAAAAAAAAAAA” 

4000 PERIOD=1 


4020 CLS 
4040 PRINT “Select type of system:” 
:PRINT 
4060 PRINT “ 1. Monoalphabetic uniliteral” 
4080 PRINT “ 2. Periodic polyalphabetic” 


4100 PRINT “ 3. Aperiodic polyalphabetic” 


F-6 


4120 


4140 
4160 
4180 
4200 
4220 
4240 
4260 
4280 


4300 


4320 


4340 
4360 
4380 
4400 
4420 


4440 


4460 
4480 


4500 


4520 


4540 
4560 
4580 


4600 


4620 
4640 


4660 


PRINT 


:PRINT 


INPUT “Enter your choice: ”, SELECTION 
ON SELECTION GOSUB 4240,4860,6020 
RETURN 


’ *** Monoalphabetic Alphabet Entry Subroutine *** 
CLS:PLFAG =0:CIFLAG =0:DONEFLAG =0 

PRINT TAB(5);“Present alphabet is--”:PRINT 

PRINT TAB(10);“P: ”; 


:-FOR N=1 TO 26 


:PRINT MID$(PCOMP$,N,1);"_"; 


iNEXT N 


PRINT TAB(10);"C: ”; 


7-FOR N=1 TO 26 


‘PRINT MID$(CCOMPO$,N,1);“ 0"; 


‘NEXT N 


PRINT 


:PRINT 


PRINT TAB(20);“1. Change plain component” 
PRINT TAB(20);“2. Change cipher component’ 
PRINT TAB(20);“3. Change specific key” 
PRINT TAB(20);“4. Accept alphabet as shown” 
PRINT 


:PRINT TAB(18);“Enter your choice: ”; 


INPUT CHOICE 
ON CHOICE GOSUB 4520,4580,4640,4500 
IF DONEFLAG=1 
THEN CCOMP$(1)=CCOMPO$ 
‘RETURN 
ELSE GOTO 4240 ' Exit if done 
DONEFLAG=1 


:RETURN 


ROW=3 


:-COLUMN=11 
:PLFAG=1 
:GOSUB 5640 


PCOMP$=COMP$ 
RETURN 
ROW=4 


*<COLUMN= 11 
:<CIFLAG=1 
:GOSUB 5640 


CCOMPO$=COMP$ 


RETURN 

LOCATE 11,10:X=SCREEN (3,13): 

PRINT “Type the specific key: ”;CHR$(X-32); 
7 of plaintext = ? of ciphertext.” 
LOCATE 11,50,1 


4680 


4700 
4720 
4740 
4760 
4780 
4800 
4820 


4840 
4860 


4880 
4900 


4920 
4940 


4960 


4980 


5000 


5020 


5040 


5060 
5080 


X$=INKEY$ 


IF X$="""" 


THEN 4680 
IF ASC(X$)>96 AND ASC(X$)< 123 

THEN X$=CHR$(ASC(X$)-32) 
FOR N=1 TO 26: 

iF X$=MiID$(CCOMPO$,N, 1) 

THEN 4780 

NEXT N 
PRINT “CHARACTER NOT FOUND IN CIPHER COMPONENT” 


‘GOTO 4640 


TCOMP$=RIGHT$(CCOMPO$,27-N) +LEFT$(CCOMPO$,N- 1) 


:CCOMPO$=TCOMPS$ 


RETURN 


: *** Periodic and Aperiodic Alphabet Entry Subroutine *** 
CLS 


:DONEFLAG=0 
:PLFLAG=0 
:-CIFLAG=0 


PRINT TAB(5);“Plain component is--” 
PRINT TAB(10);“P:  ”; 


:-FOR N=1 TO 26 


:PRINT MID$(PCOMP$,N, 1); ”; 


‘NEXT N 
‘PRINT 


PRINT TAB(5);“Cipher component is--” 
PRINT TAB(10);“C: "5 


‘FOR N=1 TO 26 


:PRINT MID$(CCOMPO$,N,1);"—”; 


‘NEXT N 
:PRINT 
“PRINT 


IF AFLAG=0 
THEN PRINT TAB(5);“Length of period is: ”;PERIOD 
ELSE PRINT TAB(5);“Length of key is: ”;PERIOD 
X=SCREEN(2, 13) 
IF AFLAG=0 
THEN REPEATKEY$=LEFT$(RKEY$,PERIOD) 
IF AFLAG=0 
THEN PRINT TAB(5);“Repeating key is ”;CHR$(X-32);” of 
plaintext = ";REPEATKEY$ 
:PRINT 


‘ELSE PRINT TAB (5);“Long running key is: ”";REPEATKEY$ 
:PRINT 


PRINT 


:PRINT 


PRINT TAB(20);“1. Change plain component” 
PRINT TAB(20);“2. Change cipher component” 
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F-8 


5100 


5120 


5140 


5160 


5180 
5200 


5220 


5240 


5260 


5280 


5300 


5320 
5340 


5360 
5380 


5400 
5420 


5440 


5460 


IF AFLAG=0 

THEN PRINT TAB (20);“3. Change repeating key” 
ELSE PRINT TAB(20);“3. Generate long running key” 
IF AFLAG=0 

THEN PRINT TAB(20);“4. Show complete matrix” 
ELSE PRINT TAB(20);“4. Accept alphabets” 
PRINT 


‘PRINT TAB(18);“Enter your choice: ”; 


INPUT CHOICE 
ON CHOICE GOSUB 5220,5260,5300,5420 
IF DONEFLAG=1 
THEN RETURN 
ELSE GOTO 4860 
ROW=2 


:-COLUMN=11 
:PLFLAG=1 
:>GOSUB 5640 


PCOMP$=COMP$ 


7RETURN 


ROW =4 


:-COLUMN=11 
:-CIFLAG=1 

:CMIXFLAG=1 
:GOSUB 5640 


CCOMPO$=COMP$ 


‘RETURN 


IF AFLAG=1 
THEN 5820 
ELSE LOCATE 7,39 


-INPUT RKEY$ 


PERIOD =LEN(RKEY$) 
FOR N=1 TO PERIOD: 
FOR P=1 TO 26 
:IF MID$(RKEY$,N, 1) =MID$(CCOMPO$,P,1) 
THEN 5380 
NEXT P 
CCOMP$(N)=RIGHT$(CCOMPO$,27-P)+LEFT$(CCOMPO$,P-1) 


:NEXT N 


RETURN 
CLS 


IF AFLAG=1 


THEN 4500 
PRINT TAB(9);“P: ”; 


:-FOR N=1 TO 26 


:PRINT MID$(PCOMP$,N,1);"_”; 


:NEXT N 
-PRINT 
SPRINT TAB (13) i=ceseases tice eccanstace setcbose cose cocactotseues H 


FOR P=1 TO PERIOD 


5480 


5700 


PRINT TAB(9);“C”;CHR$(48+P);"”: 
-FOR N=1 TO 26 

:PRINT MID$(CCOMP$(P),N,1);"”; 
:NEXT N 
:=PRINT 


NEXT P 

PRINT TAB(20);“1. Change matrix” 

PRINT TAB(20);“2. Accept matrix” 

INPUT“ Enter your choice: ”;CHOICE 
ON CHOICE GOTO 4860,4500 


’ *** Reads in Edited Plain or Cipher Component From Screen *** 
LOCATE ROW, COLUMN 


‘INPUT DUMMY$ ' DUMMY$ is not used as text is read from screen 


COMP$="" ” 


FOR N=13 TO 63 STEP 2 


:-X=SCREEN(ROW,N) 
:-COMP$=COMP$+CHR$(X) 
IF PLFLAG=1 AND (X<96 OR X>122) AND X<>46 
THEN BEEP 
:GOTO 5640 
iF CIFLAG=1 AND (X<65 OR X>90) 
THEN BEEP 
:GOTO 5640 
NEXT N 
RETURN 


" *** Aperiodic Long-Running Key Generation Subroutine *** 
CLS 

RANDOMIZE 

INPUT “Enter the number of alphabets (up to 200): ”;PERIOD 
FOR N=1 TO PERIOD 

LRK$=LRK$+CHR&(INT(RND*26)+65) 

NEXT N 

REPEATKEY$=LRK$ 


:-RKEY$=LRK$ 


GOTO 5340 


’ *** Sets Flag Indicating Long-Running Key System *** 
AFLAG=1 


:GOTO 4806 


‘*** Text Print Subroutine *** 

CLS 

PRINT “IS PRINTER READY (Y/N)? 
X$=INKEY$ 


IF X$=""" 


THEN 6120 
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6140 


6160 
6180 
6200 
6220 
6240 
6260 


6280 
6300 


6320 
6340 
6360 
6380 
6400 
6420 
6440 
6460 
6480 
6500 
6520 
6540 
6560 
6580 
6600 
6620 


6640 
6660 
6680 
6700 
6720 
6740 
6760 
6780 
6800 
6820 
6840 
6860 
6880 
6900 
6920 
6940 
6960 
6980 
7000 


IF X$=“N" OR X$=“n" 
THEN RETURN 
OUTFILE$=PRINTERS 
GOSUB 6440 
PRINT #1,FORMFEED$;FORMFEED$ 
CLOSE #1 
STATUS$(4)=" (TEXT PRINTED)” 
IF PRINTER$<>“CON” 
THEN 6320 
PRINT “PRESS ANY KEY TO CONTINUE” 
GO$=INKEY$ 


IF GO$=" " 


THEN 6300 
RETURN 


'*** Text Save to Disk Subroutine *** 
CLS 
PRINT “Enter complete disk filename for the save text, for example,” 
INPUT “A:MYSAVE.TXT ”;OUTFILE$ 
OPEN OUTFILE$ FOR OUTPUT AS #1 
TEXTCOUNT=0 
FOR N=1 TO NRLINES 
PRINT #1,PTEXTD$(N) 
PRINT #1,CTEXTD$(N) 
PRINT #1,KTEXTD$(N) 
TEXTCOUNT =TEXTCOUNT +LEN(CTEXTIS$(N)) 
PRINT +1, 
NEXT N 
IF PERIOD>20 
THEN 6720 


PRINT#1,PCOMP$ 
FOR N=1 TO PERIOD 
PRINT #1,CCOMP$(N) 


NEXT N 

IF OUTFILE$=PRINTER$ OR FILEFLAG=1 THEN RETURN 
CLOSE #1 

IF OUTFILE$<>PRINTER$ THEN STATUS$(5) =“ (TEXT SAVED)” 
RETURN 

’ *** Frequency Count, IC Subroutine *** 

CLS 

PRINT “Select the routine you want to run:” 

PRINT:PRINT 

PRINT ” 1. Monographic frequencies and ICs'’+STAT$(1) 
PRINT "' 2. Digraphic frequencies and ICs’+STAT$(2) 
PRINT ” 3. Periodic frequencies and ICs’ +STAT$(3) 
PRINT ” 4. Chi test’’+STAT$(4) 

PRINT ” 5. RETURN TO MAIN MENU” 


INPUT " Your choice: ",CHOICE$ 


7020 


7040 


7060 
7080 


7100 
7120 
7140 
7160 
7180 
7200 
7220 
7240 
7260 
7280 
7300 
7320 
7340 
7360 


7380 
7400 


7420 
7440 
7460 


7480 


7500 
7520 
7540 
7560 
7580 


7600 


7620 
7640 
7660 
7680 
7700 
7720 
7740 
7760 
7780 
7800 


IF ASC (CHOICE$)<49 OR ASC(CHOICE$)>53 

THEN 7000 
ON (ASC(CHOICE$)—48) GOSUB 7120,7440,7900,11120, 1180 
GOTO 6840 


’ *** Monographic Frequency and IC Subroutine *** 
FOR LINE=1 TO NRLINES 
FOR CHARPOS=1 TO LEN(CTEXTI$(LNE)) 
NXTLTR$=MID$(CTEXTI$(LNE),GHARPOS,1) 
Z=ASC(NXTLTR$)—64 
MFREQ(Z)=MFREQ(Z)+1 
NEXT CHARPOS 
NEXT LNE 
FOR Z=1 TO 26 
TOTLTRS=TOTLTRS+MFREQ(Z) 


PHISUM =PHISUM +(MFREQ(Z)*(MFREQ(Z)—1)) 
NEXT Z 
PHIMONO=26*PHISUM/(TOTLTRS*(TOTLTRS—1)) 
MFLAG=1 

:STAT$(1)=" (COMPLETED)” 
‘STATUS$(6) =" (COMPLETED)’’ 


RETURN 


‘*** Digraphic Frequency and IC *** 
FOR LNE=1 TO NRLINES 
IF (LEN(CTEXTI$(LNE))/2-INT(LEN(CTEXTI$(LNE))/2))=0 
THEN 7520 
CARRY$=RIGHT$(CTEXTIS$(LNE), 1) 
:CTEXTI$(LNE) =LEFT$(CTEXTI$(LNE),LEN(CTEXTI$(LNE))—1) 


CTEXTI$(LNE+1)=CARRY$+CTEXTI$(LNE +1) 
NEXT LNE 
FOR LNE=1 TO NRLINES 

FOR DIG=1 TO INT(LEN(CTEXTI$(LNE))/2) 


LTR1=ASC(MID$(CTEXTI$(LNE),DIG*2—1,1))—64 
:LTR2=ASC(MID$(CTEXTI$(LNE), DIG *2, 1)) -64 
IF LTR1=—-18 OR LTR2=—18 
THEN 7640 
DIFREQ(LTR1,LTR2)=DIFREQ(LTR1,LTR2)+1 
NEXT DIG 
NEXT LNE 
FOR ROW=1 TO 26 


FOR COLUMN=1 TO 26 
TOTDIG=TOTDIG+DIFREQ(ROW,COLUMN) 
DIPHISUM=DIPHISUM+(DIFREQ(ROW,COLUMN)*(DIFREQ(ROW,COLUMN)- 1)) 
NEXT COLUMN 
NEXT ROW 
PHIDIG=676*DIPHISUM/(TOTDIG*(TOTDIG—1)) 
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7820 


7840 
7860 
7880 
7900 
7920 
7940 
7960 
7980 
8000 
8020 


8040 
8060 
8080 
8100 
8120 


8140 
8160 
8180 
8200 
8220 
8240 
8260 
8280 
8300 
8320 
8340 
8360 
8380 
8400 


8420 


8440 
8460 
8480 
8500 
8520 
8546 
8560 
8580 
8600 


8620 


DFLAG=1: 


<STAT$(2)=" (COMPLETED)” 
‘STATUS$(6)=""  (COMPLETED)” 


RETURN 


’ *** Periodic Frequency, IC Subroute *** 
CYCLEPOS=0 
INPUT “What period do you want to use? ”,PERIOD 
FOR N=1 TO PERIOD 
FOR M=1 TO 26 
PFREQ(N,M)=0 
NEXT M 
PERPHISUM(N)=0 
:PERTOTLTR(N)=0 
NEXT N 
FOR N=1 TO NRLINES 
FOR M=1 TO LEN(CTEXTIS(N)) 
CYCLEPOS=CYCLEPOS +1 
IF CYCLEPOS>PERIOD 
THEN CYCLEPOS=1 
NXTCHAR$=MID$(CTEXTI$(N),M, 1) 
Z=ASC(NXTCHAR$)-—64 
IF Z=—18 THEN Z=27 
PFREQ(CYCLEPOS,2Z)=PFREQ(CYCLEPOS,Z)+1 
NEXT M 
NEXT N 
FOR M=1 TO PERIOD 
FOR N=1 TO 26 
PERTOTLTR(M)=PERTOTLTR(M)+PFREQ(M,N) 
PERPHISUM(M)=PERPHISUM(M)+(PFREQ(M,N)*(PFREQ(M,N)-—1)) 
NEXT N 
PHIPERI(M) =26*PERPHISUM(M)/(PERTOTLTR(M)*(PERTOTLTR(M)-—1)) 
NEXT M 
PFLAG=1 


-STAT$(3)="" (COMPLETED)” 
‘STATUS$(6)=" (COMPLETED) 


IF CMIXFLAG=0 
THEN 8540 ' skips mixed alphabet routine if std sequence 
FOR M=1 TO PERIOD 
FOR N=1 TO 26 
PMIXFREQ(M,N) =PFREQ(M,ASC(MID$(CCOMPO$,N, 1)) 64) 


N 
nD 
it 
' 
' 


*** Mixed Alphabet Periodic Stat Print *** 
ALPH$="ABCDEFGHIJKLMNOPQRSTU 
VWXY 2" 

CLS 


8640 
8660 
8680 


8700 


8720 


8740 


8760 
8780 
8800 
8820 
8840 
8860 
8880 


8900 
8920 
8940 
8960 
8980 


9000 
9020 
9040 
9060 
9080 


9100 
9120 
9140 
9160 
9180 
9200 
9220 
9240 
9260 


9280 
9300 
9320 
9340 
9360 


OUTFILE$=PRINTER$ 

GOSUB 6440 

IF MFLAG=1 
THEN GOSUB 8880 

IF DFLAG=1 
THEN PRINT #1,FORMFEED$ 
:GOSUB 9080 

IF PFLAG=1 
THEN PRINT #1,FORMFEED$ 
:GOSUB 9360 

IF CMIXFLAG=1 
THEN PRINT #1,FORMFEED$ 
:GOSUB 9580 

PRINT #1,FORMFEED$ 

PRINT #1,FORMFEED$ 

CLOSE #1 

RETURN 


' *** Print Monographic Stats *** 
PRINT #1, 


:PRINT #1, 


PRINT #1,ALPH$ 
FOR N=1 TO 26 
PRINT #1,USING "'###";MFREQ(N); 
NEXT N 
PRINT #1, 


:PRINT #1, 


PRINT #1,”/TOTAL LETTERS =";TOTLTRS;” 
RETURN 


‘** Print Digraphic Stats ** 
PRINT #1, 

:PRINT #1, 

PRINT #1," ";ALPH$ 


FOR N=1 TO 26 
PRINT #1,CHR$(N+64); 
FOR M=1 TO 26 
PRINT #1,USING "###";DIFREQ(N,M); 
NEXT M 
PRINT #1, 
NEXT N 
PRINT #1, 


“PRINT #1, 


PRINT #1, ‘'TOTAL DIGRAPHS =";TOTDIG;” 
RETURN 


‘ *** Print Monographic Stats *** 
PRINT #1, 


:PRINT #1, 


MONOGRAPHIC IC =";PHIMONO 


DIGRAPHIC IC=";PHIDIG 


F-13 


F-14 


9380 
9400 
9420 
9440 
9460 
9480 
9500 
9520 


9540 
9560 
9580 


9600 
9620 
9640 
9660 
9680 
9700 
9720 
9740 
9760 
9780 
9800 
9820 
9840 
9860 


9880 
9900 
9920 
9940 
9960 


9980 

10000 
10020 
10040 
10060 
10080 


10100 


10120 


10140 


40160 
10180 


FOR N=1 TO PERIOD 
PRINT #1,ALPH$ 


FOR M=1 TO 26 
PRINT #1,USING "#4#";PFREQ(N,M); 
NEXT M 
PRINT #1, 
PRINT #1,/TOTAL LETTERS =";PERTOTLTR(N);” IC =";PHIPERI(N) 
PRINT #1, 
:PRINT #1, 
NEXT N 
RETURN 
PRINT#1, 
-PRINT #1, 
FOR M=1 TO PERIOD 
ALPHMIX$(M)="" ”’ 
FOR N=1 TO 26 
ALPHMIX$(M) =ALPHMIX$(M)+" ‘’+MID$(CCOMPO$,N, 1) 
NEXT N 
NEXT M 
FOR M=1 TO PERIOD 
PRINT #1,ALPHMIX$(M) 
FOR N=1 TO 26 
PRINT #1,USING "###”";PMIXFREQ(M,N); 
NEXT N 
PRINT #1, 
PRINT #1, “TOTAL LETTERS =";PERTOTLTR(M);” IC =";PHIPERI(M) 
PRINT #1, 
:PRINT #1, 
NEXT M 
RETURN 
' *** Statistics Save to Disk Subroutine *** 
ALPH$="ABCDEFGHIJKLMOPQRSTU 


VWXYZ" 
CLS 
PRINT “Enter the complete disk filename for the saved statistics, for example,” 
INPUT “A:MYSTAT.TXT ";OUTFILE$ 
FILEFLAG=1 
GOSUB 6440 
IF MFLAG=1 
THEN GOSUB 8880 
IF DFLAG=1 
THEN GOSUB 9080 
IF PFLAG=1 
THEN GOSUB 9360 
IF CMIXFLAG=1 
THEN GOSUB 9580 
CLOSE #1 
RETURN 


10200 
10220 
10240 
10260 
10280 
10300 


10320 
10340 
10360 


anzan 


10780 
10800 
* 10820 
10840 
10860 


10880 
10900 


! 


’*** Subroutine to Find Repeats *** 
INPUT “What is the shortest length repeat you want listed?”, RPTLEN 
OUTFILE$=PRINTERS 
OPEN OUTFILE$ FOR OUTPUT AS #1 
IF RPTLEN<2 
THEN 10240 
FOR TLINE=1 TO NALINES— 1 
FOR ALTR=1 TO LEN(CTEXTI$(TLINE)) 
IF TLINE<>NRLINES 
THEN CT$=CTEXTI$(TLINE) +CTEXTI$(TLINE+1) 
ELSE CT$=CTEXTI$(TLINE) 
A$=MID$(CT$,ALTR,RPTLEN) 
FOR BLTR=ALTR+2 TO LEN(CTEXTIS(TLINE)) +2 
:BLINE=TLINE 
:CTBS=CT$ 
IF BLTR>LEN(CTEXTI$(TLINE)) 
THEN 10480 
B$=MID$(CTB$,BLTR,RPTLEN) 
IF A$=B$ 
THEN GOSUB 10800 
NEXT BLTR 
IF TLINE=NRLINES 
THEN 10660 
FOR BLINE=TLINE+1 TO NRLINES 
IF BLINE<>NRLINES 
THEN CTB$=CTEXTI$(BLINE)+CTEXTIS(BLINE+ 1) 
ELSE CTB$=CTEXTI$(BLINE) 
FOR BLTR=1 TO LEN(CTEXT!$(BLINE)) 
B$=MID$(CTB$,BLTR,RPTLEN) 
IF A$=B$ 
THEN GOSUB 10800 
NEXT BLTR 
NEXT BLINE 
NEXT ALTR 
NEXT TLINE 
PRINT #1, FORMFEED$,FORMFEED$ 
CLOSE #1 
RETURN 


eee WRR 


Subroutine to Check Length of Repeat and Print it 
LONGER=RPTLEN 
PRINT A$ 
LONGER=LONGER+1 
IF MID$(CT$,ALTR,LONGER) =MID$(CTB$,BLTR,LONGER) 
THEN 10840 ’ Try it longer 
LONGER=LONGER~—1 ' Nope, too long 
PRINT #1,MID$(CT$,ALTR,LONGER);” AT LINE”; TLINE;"”, LETTER” ;ALTR 
" AND AT LINE”’;BLINE;”, LETTER’;BLTR 
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10920 RETURN 


10940 
10960 ' *** Quit Subroutine *** 
10980 CLS 


11000 INPUT “Are you sure you want to quit (Y/N)? ",CHOICE$ 
11020 IF CHOICES <>"”Y” AND CHOICE$ <> "y” 

THEN 1180 
11040 KEY ON‘ restores bottom of screen prompts 
11060 END 
11080 ' 
11100 ‘ *** Chi Test Subroutine *** 
11120 PRINT “Do you want to print results or save to disk as text file?” 
11140 INPUT “Enter P for printer, D for disk, or Q to quit.”,S$ 
11160 IF S$="P” OR S$=“p” 

THEN OUTFILE$=PRINTER$ 

:GOTO 11240 

11180 IF S$="Q” OR S$=“q” 

THEN RETURN 
11200 IF S$<>“D”" AND S$<>“d” 

THEN 11140 
11220 INPUT “Enter the complete disk filename. ",OUTFILE$ 
11240 OPEN OUTFILE$ FOR OUTPUT AS #1 
11260 PRINT “Which of the ";PERIOD;“alphabets do you want to match?” 


11280 PRINT 
11300 INPUT “ Enter number of 1st alphabet to be matched: ”,ALF1 
11320, INPUT “ Enter number of 2nd alphabet to be matched: ”,ALF2 


11340 PRINT “MATCHING ALPHABET”;ALF1;“AND ALPHABET”;ALF2 
11360 PRINT #1,“°MATCHING ALPHABET”;ALF1;“AND ALPHABET”;ALF2 
11380 FOR N=1 TO 26 
11400 IF CMIXFLAG=1 

THEN SET1(N)=PMIXFREQ(ALF1,N) 

ELSE SET1(N)=PFREQ(ALF1,N) 

11420 IF CMIXFLAG=1 

THEN SET2(N)=PMIXFREQ(ALF2,N) 

ELSE SET2(N)=PFREQ(ALF2,N) 

11440 NEXT N 
11460 FOR M=1 TO 26 
11480 FOR L=1 TO 26 
11500 PRINT #1,” “MID$(CCOMPO$,L,1); ’ Print first sequence 
11520 NEXT L 
11540 PRINT #1, 
11560 FOR L=1 TO 26 
11580 PRINT #1, USING '###";SET1(L); ‘ Print first sequence frequencies 
11600 NEXT L 
11620 PRINT #1, 
11640 FOR L=0 TO 25 
11660 LTRPOS=M+L 

IF LTRPOS>26 

THEN LTRPOS=LTRPOS—26 
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11680 
11700 
11720 
11740 
11760 
11780 
11800 


11820 
11840 
11860 


11880 
11900 
11920 


11940 


11960 
11980 


12000 
12020 


12040 


12060 
12080 


PRINT #1, " ';MID$(CCOMPO$,LTRPOS,1); ’ Print second sequence 
NEXT L 
PRINT #1, 
MATCH(M)=0 
FOR N=1 TO 26 
MATCH(M)=MATCH(M)+(SET1(N)*SET(N)) 
PRINT #1, USING "###";SET2(N); ’ Print second sequence frequencies 


NEXT N 
PRINT #1, 
IF M/2-INT(M/2)<>0 
THEN PRINT TAB(1) “MATCH”;M;‘:”;MATCH (M); 
ELSE PRINT TAB(40) “MATCH”;M;":";MATCH (M); 
PRINT #1,“ MATCH”;M;":”;MATCH (M) 
:PRINT #1, 
SET2(27)=SET2(1) 
FOR N=1 TO 26 
SET2(N) =SET2(N+1): 
NEXT N 
NEXT M 
IF OUTFILE$=PRINTER$ 
THEN PRINT 41,FORMFEED$ 
INPUT “ANOTHER MATCH (Y/N)?”,Q$ 
IF Q$="“Y" OR Q$="“y” 
THEN 11300 
IF OUTFILE$ =PRINTER$ 
THEN PRINT #1,FORMFEED$ 
CLOSE #1 
RETURN 
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Digraphic, 6-8, 6-10 
Dinomic, 5-6 
Monome-dinome, 5-7 
Periodic polyalphabetic systems, 8-4 
Triliteral, 4-13b 
Uniliteral, 4-9 
Frequency distribution, 2-9, 2-10 
Frequency matching. See also Chi test 
Uniliteral systems, 3-6 
Variant multiliteral systems, 5-11 


Generatrix method. See Completing the plain component 
sequence 
Geometric chaining. See Chaining 


Hat diagrams, 12-3 

Hexadecimal arithmetic, 8-2b 

Highs and lows. See Peaks and troughs 
Horizontal two-square. See Two-square systems 


IC, See Coincidence tests 

Idiomorphs. See Word patterns 

Index of coincidence. See Coincidence tests 
Indicator systems, 2-6b, 3-3b, 14-12a(2), 10-3a 
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Indirect symmetry, 9-9, 9-10 
Internal variant systems. See Multiliteral with variants 
Interruptor letter aperiodics, 10-1c 
Isologous segements, 5-13, 5-15 
Isologs. See also Definitions 
Analysis of, 7-1 
In periodic polyalphabetics, 9-11 
In Playfair systems, 6-10b 
In syllabary squares, 5-15 
In variant systems, 5-12 


Kappa test, 10-3a(3) 
Keyword mixed sequence. See also Definitions 
In biliteral and dinomic systems, 5-6 
Completing the plain component, 3-7, 4-11, 9-6 
In four-square systems, 6-3, 7-2, 7-3 
In monome-dinome systems, 5-7 
In periodic systems, 9-7 
In Playfair systems, 7-6 
In two-square systems, 6-4, 6-5 


Language characteristics, 2-8, 2-9, 2-11 through 2-13, 4-13, 


15-4 
Letter frequencies, 2-9, 2-10 
Linear chaining, 9-10 
Logarithmic weights of letter probabilities, 9-4e 
Long-running key aperiodics. See Aperiodic systems 
Low frequency letters 
For fillers, 3-4c, 3-6d, 6-10b(7) 
JKQXZ, 2-8a 
For nulls, 6-6e, 6-10b(7) 


Machine systems, 8-2 
Matrices 
Analyst’s, 9-9, 9-10, 12-3 
Code chart, 14-3 
Columnar transposition, 11-2 
Completely filled, 11-2, 12-1 
Coordinate matrix systems, 5-3 
Incompletely filled, 11-2, 12-3 
For transposition mixed sequences, 4-3 
Message 
Externals, 2-5 
For messages in depth. See Depth 
Preparation, 3-4 
Microdots, 1-7 
Mixed cipher alphabets, 4-1 
Modulo arithmetic, 5-3f, 8-le 
Monoalphabetic multiliteral systems. See Multiliteral 
systems 
Monoalphabetic uniliteral substitution. See Definitions; 
Uniliteral systems 
Monographic. See Definitions; Phi tests 
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Monome-dinome systems. See also Definitions; System 
identification 
Cryptography of, 5-3 
Solution of, 5-7 
Multiliteral substitution. See Definitions; Monome-dinome 
systems; Syllabary squares; Triliteral and trinomic systems 
Multiliteral systems. See also System identification 
Analysis techniques, 5-4 
Cryptology of simple, 5-3 
Solution by vowel-consonant relationships, 5-8 
Solution of dinomic and biliteral systems of simple, 5-6 
Solution of isologous segments, 5-13 
Solution of isologs, 5-12 
With variants, solution of external variant systems, 5-11 
With variants, solution of internal variant systems, 5-14 


Nonrepeating key, 8-1c. See also Aperiodic systems 
Numerically-keyed aperiodics. See Aperiodic systems 


Numerically-keyed columnar transposition. See Columnar 
transposition 


Offset depth, 10-3 
One-time pad system, 10-2 


Pamcodes. See Codes 
Peaks and troughs, 2-11, 2-15, 3-6, 4-9d, 6-7e, 8-3, 8-4, 9-3 
Periodic polyalphabetic systems. See Periodic systems 
Periodic systems. See also Definitions 
Accidental repeats in, 8-3, 8-4 
Determining the period length, 8-3, 8-4 
Factoring, 8-3 
IC, 8-4 
Solution of mixed alphabets by linear and geometric 
chaining, 9-10 
Solution of mixed alphabets by the chi test, 9-7c 
Solution of mixed alphabets in, 9-5 
Solution of mixed alphabets in direct symmetry, 9-8 
Solution of mixed alphabets in indirect symmetry, 9-9, 
9-10 
Solution of mixed alphabets in isologs, 9-11 
Solution of mixed alphabets when both sequences are 
known, 9-6 
Solution of mixed alphabets with known plaintext 
sequences, 9-8 
Solution of mixed alphabets with unknown mixed 
sequences, 9-9 
Solution of standard alphabets by frequency matching, 
9-3 
Solution of standard alphabets by the generatrix method, 
9-4 
Solution of standard alphabets by the probable word 
method, 9-2 
Solution of standard alphabets in, 9-1 
Phi test. See also Digraphic systems 
Calculation, 2-14 
Interpretation, 2-15 


Playfair systems. See also System identification 
Cryptography of, 6-6 
Solution of digraphic word patterns in, 7-5 
Solution of matrix reconstruction in, 7-6 
Polyalphabetic systems. See also Aperiodic systems; 
Definitions; Periodic systems; System identification 
Baudot code. See Codes 
Machine and computer based systems, 8-2 
Types, 8-1 
Polygraphic. See Definitions; Digraphic systems; Four- 
square systems; Playfair systems; Two-square systems 
Prearranged message codes. See Codes 
Probable word method, 4-10, 4-12 
Pseudotext, 3-7, 4-10, 4-11, 5-11 


Rectangular rule, 6-3 through 6-5, 7-5, 7-6 
Repeating keys, 8-1, 9-11, 14-1 

Repeats, 4-9, 8-4 

Roughness, 2-11 

Route transposition, 11-1, 11-3 


Sequence 
Decimation mixed, 4-4 
Direct standard, 3-2 
Keyword mixed, 4-2 
Random mixed, 4-1 
Reverse standard, 3-2 
Standard, 3-2 
Tranposition mixed, 4-3 
Signal communications, 1-4 
Signal Operation Instructions (SOJ), 3-3a 
Specific keys, 2-6b, 3-3 
Standard sequence. See Sequence 
Statistical tests. See Coincidence tests 
Stereotypes, 4-12 
Sum checks, 5-3f 
Superencipherment, 1-6 
Superencryption, 1-6 
Syllabary spelling. See Code systems 
Syllabary squares. See also Definitions 
Cryptography of, 5-3e 
Solution of, 5-15 
System identification 
Chi test (cross IC), 4-9e, 9-7 
Coincidence tests, 2-12 
Delta IC, 2-14g, 8-4 
Delta IC with periodic systems, 8-4 
Digraphic systems, 6-7, 6-9, 6-10 
Extended examples, 6-10 
Grouping messages hy system for, 4-9 
Index of coincidence, 2-13 
Kappa test, 10-3a(3) 
Letter frequencies, 2-10 
Monographic phi test, 2-14 


Monome-dinome systems, 5-7 
Multiliteral systems, simple, 5-5 
Multiliteral systems with variants, 5-10 
Phi test interpretation, 2-15 
Playfair systems, 6-7d, 6-9, 6-10 
Polyalphabetic systems, 2-10c, 8-3 
Roughness, 2-11 
Transposition systems, 2-10a, 11-1 
Two-square systems, 6-10, 7-4 
System indicators, 2-6b, 3-3 
System requirements, 2-1 
Tests. See Coincidence tests 
Traffic analysis, 2-5 
Transparencies 
Direct, 6-4b, 6-5b, 6-7c, 7-4 
Reverse, 6-5b, 6-7c, 7-4 
Transposition, columnar. See Columnar transposition 
Transposition mixed sequence 
Numerically-keyed columnar, 4-3b, 4-7d 
Recovery of, 4-7¢ 
Simple columnar, 4-3a 
Transposition, route. See Route transposition 
Transposition systems. See also System identification 
Geometric process, 11-1c 
Grille, 11-1d 
Solution of messages with similar beginnings and 
endings, 13-2 
Sohation of messages with the same length and keys, 13-3 
Solution of special exploitable situations, 13-1 
Trial decipherment 
Using the brute force method, 3-7, 4-10, 4-11 
For variant multiliteral systems, 5-11 
Triliteral and trinomic systems. See also Defintions 
Cryptography of, 5-3b 
Solution of, 5-9 
Triliteral frequency counts, 4-13b 
Two-square systems. See also System identification 
Cryptography of, 6-4, 6-5 
Solution of, 6-4b, 7-4 


Uniliteral systems 
Frequency distribution, 2-9 
Preparation for analysis, 4-9 
Solution by completing the plain component sequence, 
3-7, 4-11 
Solution by frequency matching, 3-6, 4-10 
Solution by the brute force method, 3-7, 4-10, 4-11 
Solution by the generatrix method, 3-7, 4-11 
Solution by the probable word method, 4-10, 4-12 
Solution by using vowel-consonant relationships, 4-13 
Solution with computer support, 4-9 
Stereotypes, 4-13 
Word patterns (idiomorphs), 4-12c 
Worksheet preparation, 4-9 
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Variant systems. See Multiliteral with variants 
Vertical two-square. See Two-square systems 
Vigenere square, 8-1, 10-3 
Vowel-consonant relationships 

Consonant line, 4-13 

In multiliteral systems, 5-8 

In uniliteral systems, 4-13 


Word patterns (idiomorphs), 4-12c, 5-6d, 5-6e, 5-7d, 7-1 
through 7-3, 7-5, 7-6, 15-2 

Word-length aperiodics. See Aperiodic systems 
Worksheet preparation, 4-9 
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